Malicious code in @zalastax/nolb-pars (npm)

The package @zalastax/nolb-pars was found to contain malicious code...

MAL-2025-12972 Malicious code in @zalastax/nolb-pars (npm)

The package @zalastax/nolb-pars was found to contain malicious code...

pars-ref.ir Improper Access Control vulnerability OBB-3838837

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-14445

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12L Description The issue is related to a possible out of bounds read due to improper input validation in the avrc ctrl pars vendor cmd function of avrc pars ct.cc. This could lead to remote...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in avrcparsct.cc in avrcctrlparsvendorrsp, due to a lack of boundary checking. an out-of-bounds read may occur. An attacker could exploit this vulnerability to cause a remote...

CVE-2021-0316

In avrcparsvendorcmd of avrcparstg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions:...

CVE-2021-0316

In avrcparsvendorcmd of avrcparstg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions:...

CVE-2020-0185

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Androi...

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE : CVE-2019-18859 P...

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Date: 2019-11-10 Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE :...

Digi AnywhereUSB 14 Cross Site Scripting

Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Date: 2019-11-10 Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE : CVE-2019-18859 PoC GET...

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting

Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Date: 2019-11-10 Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE : CVE-2019-18859 PoC GET...

PT-2018-19040

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out of bounds read in the avrc ctrl pars vendor rsp function of avrc pars ct.c due to a missing bounds check. This could lead to remote information disclosure over...

PT-2018-19041

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out-of-bounds read in the avrc pars vendor rsp function of avcr pars ct.cc. This could lead to remote information disclosure in the Bluetooth service without requiri...

PT-2018-19042

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description A possible out of bounds read due to a missing bounds check in the avrc pars vendor rsp function of avrc pars ct.cc could lead to remote information disclosure. No additional execution privileges are...

CVE-2017-13281

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-07453)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the avrcparsvendorcmd of the avrcparstg.cc file in Android, which stems from a lack of boundary detection in the program. A remote...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-07666)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A stack buffer overflow vulnerability exists in the avrcparsbrowsingcmd file of the avrcparstg.cc file in Android versions 8.0 and 8.1, which stems from the program's failure to...

pars-disa.ir XSS vulnerability

Open Bug Bounty ID: OBB-571394 Description| Value ---|--- Affected Website:| pars-disa.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Resaneh Pardaz Pars SQL Injection Vulnerability

Resaneh Pardaz Pars is a web solution product from parsmedia. An SQL injection vulnerability exists in the id parameter of the category.php page of Resaneh Pardaz Pars, which can be exploited by an attacker to compromise the application, access or modify data, or exploit a potential vulnerability...