MAL-2025-12972 Malicious code in @zalastax/nolb-pars (npm)

The package @zalastax/nolb-pars was found to contain malicious code...

Malicious code in @zalastax/nolb-pars (npm)

The package @zalastax/nolb-pars was found to contain malicious code...

pars-ref.ir Improper Access Control vulnerability OBB-3838837

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-14445

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12L Description The issue is related to a possible out of bounds read due to improper input validation in the avrc ctrl pars vendor cmd function of avrc pars ct.cc. This could lead to remote...

Google Android Buffer Overflow Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in avrcparsct.cc in avrcctrlparsvendorrsp, due to a lack of boundary checking. an out-of-bounds read may occur. An attacker could exploit this vulnerability to cause a remote...

PT-2022-11082

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12L Description The issue is related to a possible out of bounds read in the avrc ctrl pars vendor rsp function of avrc pars ct.cc due to a missing bounds check. This could lead to remote information...

PT-2021-13154

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: There is a possible out of bounds read due to a missing bounds check in avrc pars browse rsp of avrc pars ct.cc. This could lead to remote information disclosure over Bluetooth with no additional...

CVE-2021-0316

In avrcparsvendorcmd of avrcparstg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions:...

CVE-2021-0316

In avrcparsvendorcmd of avrcparstg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions:...

PT-2021-12999

Name of the Vulnerable Software and Affected Versions: Android versions Android-8.0 through Android-11 Description: The issue is related to a possible out of bounds write in the avrc pars vendor cmd function due to a missing bounds check. This could lead to remote code execution over Bluetooth wi...

PT-2020-16599

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in the avrc ctrl pars vendor cmd function of avrc pars tg.cc due to a missing bounds check. This could lead to local information disclosure with Syst...

CVE-2020-0185

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Androi...

PT-2020-11545

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the avrc pars browsing cmd function of avrc pars tg.cc due to a missing bounds check. This could lead to local information disclosure with no...

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE : CVE-2019-18859 P...

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Date: 2019-11-10 Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE :...

Digi AnywhereUSB 14 Cross Site Scripting

Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Date: 2019-11-10 Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE : CVE-2019-18859 PoC GET...

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting

Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Date: 2019-11-10 Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE : CVE-2019-18859 PoC GET...

PT-2019-16021

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9 Description A possible out of bounds read due to a missing bounds check in avrc pars browse rsp of avrc pars ct.cc could lead to remote information disclosure over Bluetooth with no additional execution privilege...

PT-2018-19042

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description A possible out of bounds read due to a missing bounds check in the avrc pars vendor rsp function of avrc pars ct.cc could lead to remote information disclosure. No additional execution privileges are...

PT-2018-19041

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out-of-bounds read in the avrc pars vendor rsp function of avcr pars ct.cc. This could lead to remote information disclosure in the Bluetooth service without requiri...