CVE-2018-20579

Contiki-NG before 4.2 has a stack-based buffer overflow in the push function in os/lib/json/jsonparse.c that allows an out-of-bounds write of an '' or '' character...

CVE-2018-20579

Contiki-NG prior to 4.2 is affected by a stack-based buffer overflow in the push function of os/lib/json/jsonparse.c, allowing an out-of-bounds write of a '{' or '[' character. This CVE entry is corroborated by multiple sources in the connected set (NVD, Red Hat, CNVD, CVE list, etc.). The descri...

[SECURITY] Fedora 29 Update: python-lxml-4.2.5-1.fc29

lxml is a Pythonic, mature binding for the libxml2 and libxslt libraries. It provides safe and convenient access to these libraries using the ElementTre e It extends the ElementTree API significantly to offer support for XPath, Relax NG, XML Schema, XSLT, C14N and much more.To contact the project...

The vulnerability of the pgrep function in console-based applications for monitoring and terminating system processes in Props-ng allows a attacker to cause a service failure.

The vulnerability of the pgrep function in console-based applications for monitoring and terminating system processes in Props-ng is related to an error that causes buffer overflows. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through specially crafted...

Aircrack-ng 1.5 - Complete Suite Of Tools To Assess WiFi Network Security

Aircrack-ng is a complete suite of tools to assess WiFi network security. It focuses on different areas of WiFi security: Monitoring: Packet capture and export of data to text files for further processing by third party tools. Attacking: Replay attacks, deauthentication, fake access points and...

CVE-2018-15537

Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...

DEBIAN-CVE-2018-15537

Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...

UBUNTU-CVE-2018-15537

Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...

CVE-2018-15537

Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...

Unrestricted file upload

Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...

CVE-2018-15537

Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...

CVE-2018-15537

CVE-2018-15537 affects OCS Inventory NG, specifically the ocsreports component. The vulnerability is an unrestricted file upload that can lead to remote code execution, enabling a privileged user to gain access to the server via crafted HTTP requests. Documented across multiple feeds (NVD, OSV, U...

CVE-2018-15537

Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...

CVE-2018-15537

Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...

OCS Inventory NG <= 2.5.0 Remote Shell Upload Vulnerability

OCS Inventory NG is prone to a remote shell upload vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Contiki-NG buffer overflow vulnerability (CNVD-2019-00328)

Contiki-NG is an open source, cross-platform operating system for next-generation IoT devices, and MQTT Server is a message queue transport server. A buffer overflow vulnerability exists in MQTT Server in versions of Contiki-NG prior to 4.2. An attacker can exploit this vulnerability to execute...

Design/Logic Flaw

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...

CVE-2018-19417

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...

CVE-2018-19417

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...

CVE-2018-19417

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...