Lucene search
+L

7420 matches found

zdt
zdt
added 2018/06/15 12:0 a.m.75 views

rtorrent 0.9.6 - Denial of Service Exploit

Exploit for linux platform in category dos / poc Exploit Title: rtorrent 0.9.6 - Denial of Service Exploit Author: ecx86 Vendor Homepage: http://rtorrent.net Software Link: https://github.com/rakshasa/rtorrent/releases Version: I', lenmsg crash += msg s = socket.socketsocket.AFINET,...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/06/14 12:0 a.m.36 views

rtorrent 0.9.6 - Denial of Service

Exploit Title: rtorrent 0.9.6 - Denial of Service Date: 2018-01-10 Exploit Author: ecx86 Vendor Homepage: http://rtorrent.net Software Link: https://github.com/rakshasa/rtorrent/releases Version: I', lenmsg crash += msg s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connect'1.3.3.7', 6890...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2018/06/14 12:0 a.m.22 views

rtorrent 0.9.6 - Denial of Service

rtorrent 0.9.6 - Denial of Service Exploit Title: rtorrent 0.9.6 - Denial of Service Date: 2018-01-10 Exploit Author: ecx86 Vendor Homepage: http://rtorrent.net Software Link: https://github.com/rakshasa/rtorrent/releases Version: I', lenmsg crash += msg s = socket.socketsocket.AFINET,...

7.3AI score
SaveExploits0
OSV
OSV
added 2018/06/04 7:29 p.m.8 views

CVE-2017-16021

uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-js uses a regular expression, This regular expression is vulnerable to redos. This causes the program to hang and the CPU to idle at 100%...

6.5CVSS5.8AI score0.01342EPSS
SaveExploits1References2
OSV
OSV
added 2018/06/04 6:29 a.m.4 views

DEBIAN-CVE-2018-11683

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440...

8.8CVSS8.7AI score0.02211EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2018/06/04 12:0 a.m.6 views

PT-2018-6052 · Github · Uri.Js

Name of the Vulnerable Software and Affected Versions: uri-js versions 2.1.1 and earlier Description: The issue arises from a regular expression used by uri-js to validate URLs, which is vulnerable to redos. This vulnerability causes the program to hang and results in 100% CPU usage when attempti...

6.8CVSS6.2AI score0.01342EPSS
SaveExploits1References6
OSV
OSV
added 2018/05/30 1:29 p.m.5 views

UBUNTU-CVE-2018-11432

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

6.5CVSS6.8AI score0.01434EPSS
SaveExploits1References3
CNVD
CNVD
added 2018/05/23 12:0 a.m.8 views

radare2 denial of service vulnerability (CNVD-2018-12198)

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A denial of service vulnerability exists in the parseimportptr function in radare2 2.5.0. A remote attacker can...

5.5CVSS5.7AI score0.0091EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/22 12:0 a.m.10 views

ReadStat Memory Leakage Vulnerability

ReadStat is an open source command line tool for converting SAS, Stata and SPSS files. A memory leak vulnerability exists in the savparsemachineintegerinforecord of the libreadstat.a file in ReadStat version 0.1.1. An attacker can exploit this vulnerability to cause a denial of service memory lea...

7.5CVSS6.9AI score0.01162EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2018/05/22 12:0 a.m.10 views

PT-2018-10523 · R +1 · Haven R Package +1

Name of the Vulnerable Software and Affected Versions: ReadStat version 0.1.1 haven R package affected versions not specified Description: The issue is related to multiple flaws in the ReadStat library, including an infinite loop condition, a memory leak associated with an iconv open call, and a...

7.8CVSS7.6AI score0.01163EPSS
SaveExploits3References12
OSV
OSV
added 2018/05/17 2:29 p.m.7 views

ALPINE-CVE-2018-7158

The 'path' module in the Node.js 4.x release line contains a potential regular expression denial of service ReDoS vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, splitPathRe, used within the...

7.5CVSS8.8AI score0.03409EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/17 2:29 p.m.6 views

UBUNTU-CVE-2018-7158

The 'path' module in the Node.js 4.x release line contains a potential regular expression denial of service ReDoS vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, splitPathRe, used within the...

7.5CVSS7AI score0.03409EPSS
SaveExploits0References2
Veracode
Veracode
added 2018/05/17 2:17 a.m.26 views

Heap-Based Buffer Over-read

TinyXML2 is vulnerable to heap-based buffer over-read. The vulnerability can be triggered when the attacker parses a malicious data to XMLDocument::Parse function...

9.8CVSS9.1AI score0.02103EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2018/05/17 12:0 a.m.8 views

TinyXML2 'XMLDocument::Parse' function heap buffer overflow vulnerability

TinyXML2 is a C++-based open source XML parser . A heap buffer overflow vulnerability exists in the 'XMLDocument::Parse' function of the libtinyxml2.so file in TinyXML2 version 6.2.0. An attacker can exploit this vulnerability to cause a buffer out-of-bounds read...

9.8CVSS9.5AI score0.02103EPSS
SaveExploits0References1
NVD
NVD
added 2018/05/16 3:29 p.m.39 views

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

9.8CVSS9.7AI score0.02103EPSS
SaveExploits0References3
Prion
Prion
added 2018/05/16 3:29 p.m.24 views

Heap overflow

DISPUTED TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

7.5CVSS9.6AI score0.02103EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2018/05/16 3:29 p.m.24 views

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

9.8CVSS7.4AI score0.02103EPSS
SaveExploits0References2
OSV
OSV
added 2018/05/16 3:29 p.m.7 views

DEBIAN-CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

9.8CVSS7.5AI score0.02103EPSS
SaveExploits0References1
CVE
CVE
added 2018/05/16 3:0 p.m.59 views

CVE-2018-11210

TinyXML2 6.2.0 is affected by a heap-based buffer over-read in XMLDocument::Parse (libtinyxml2.so). The CVE-2018-11210 entry notes this is due to improper use of the library and not a vulnerability in tinyxml2. NVD data lists a high/severe impact (CVSS v3: 9.8, NETWORK/NO AUTH required; all impac...

9.8CVSS9.6AI score0.02103EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2018/05/16 3:0 p.m.68 views

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

9.8CVSS9.8AI score0.02103EPSS
SaveExploits0
Rows per page
Query Builder