506 matches found
Joomla! Component MMS Blog 2.3.0 - Local File Inclusion
A directory traversal vulnerability in the MMS Blog commmsblog component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1491 info: name: Joomla! Component MMS Blo...
android-forensics
android-forensics AFLogical OSE: Aplicación y framework de forensia Android de código abierto La Edición de Código Abierto ha sido publicada para uso de personal no perteneciente a las fuerzas de seguridad, entusiastas de Android y gurús de la forensia por igual. Permite a un examinador extraer...
Stagefright-cve-2015-1538-1
Stagefright-cve-2015-1538-1 Descubierto por Joshua J. Drake @jduck de ZIMPERIUM zLabs y su proyecto fue corregido por Niranjan Shrestha @niranjanshr13. Exploit para la vulnerabilidad RCE CVE-2015-1538 1 Desbordamiento de enteros en el manejo del átomo 'stsc' de MP4 en libstagefright ¡No olvides q...
ASB-A-418776187
In queryInternal of MmsSmsProvider.java, there is a possible way to access MMS/SMS data across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-19259
A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMappingvarAccessSpecToObjectReference of the file src/iec61850/common/iec61850common.c of the component MMS Protocol Workflow. Such manipulation of the argument...
CVE-2026-19259
The CVE concerns MZ Automation libiec61850 (up to 1.6.1). The vulnerability is in the MMS Protocol Workflow, specifically MmsMapping_varAccessSpecToObjectReference in src/iec61850/common/iec61850_common.c, where manipulation of GetNamedVariableListAttributesResponse.itemId causes a heap-based buf...
CVE-2026-19259 MZ Automation libiec61850 MMS Protocol Workflow iec61850_common.c MmsMapping_varAccessSpecToObjectReference heap-based overflow
A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMappingvarAccessSpecToObjectReference of the file src/iec61850/common/iec61850common.c of the component MMS Protocol Workflow. Such manipulation of the argument...
CVE-2026-18583
A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mmsmapping/mmsmapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds read. The attack can be initiated...
CVE-2026-18583
The vulnerability CVE-2026-18583 affects mz-automation libiec61850
EUVD-2026-52152
A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mmsmapping/mmsmapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds read. The attack can be initiated...
CVE-2026-18583 mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds
A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mmsmapping/mmsmapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds read. The attack can be initiated...
EUVD-2026-51338
The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. A missing length check in the processing of the encoded presentation data allows an attacker controlled field with a zero length value to trigger a bounded heap over read. This...
EUVD-2026-51339
The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer...
CVE-2026-66349
The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER tag is received over an established session, the decoder may advance its internal buffer incorrectly due to a missing bounds check. This...
CVE-2026-66349
The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER tag is received over an established session, the decoder may advance its internal buffer incorrectly due to a missing bounds check. This...
CVE-2026-66349 MZ Automation libiec61850 Out-of-bounds Read
The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER tag is received over an established session, the decoder may advance its internal buffer incorrectly due to a missing bounds check. This...
CVE-2026-56758
The CVE-2026-56758 issue affects the ACSE layer during MMS connection establishment. Specifically, the AARQ PDU parsing of the calling AP title can be broken if an attacker controls a length value of zero or one, causing the parser to read past the end of a heap buffer. Documented impact in the c...
CVE-2026-56758 MZ Automation libiec61850 Out-of-bounds Read
The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer...
PT-2026-66626
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A flaw exists in the ISO Presentation layer during normal mode negotiation. A missing length check when processing encoded presentation data allows a field with ...