PT-2018-2904

Name of the Vulnerable Software and Affected Versions Secret Net Studio affected versions not specified Description The issue is related to errors in buffer offset calculation in the krb parse authz data function of the SnAuthRPC module, leading to dereferencing of unallocated memory. This can be...

PT-2018-2634

Name of the Vulnerable Software and Affected Versions libarchive versions 3.1.0 and later Description The issue is related to a double free error in the RAR decoder of the libarchive library, specifically in the parse codes function within libarchive/archive read support format rar.c. This error...

PT-2018-2905

Name of the Vulnerable Software and Affected Versions Secret Net Studio affected versions not specified Description The issue is related to the krb parse authz data function in the SnAuthRPC module of the Secret Net Studio information protection system. It is caused by a lack of checks for comman...

PT-2018-4002

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0.1 Description The issue is related to a missing check for failure of a call to init get bits8 in the avpriv ac3 parse header function in libavcodec/ac3 parser.c. This may trigger a NULL pointer dereference while converting a...

PT-2018-2903

Name of the Vulnerable Software and Affected Versions Secret Net Studio affected versions not specified Description The issue is related to a buffer overflow in the heap of the krb parse authz data function in the SnAuthRPC module of the Secret Net Studio information protection system. This can b...

CVE-2018-13066

There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWFDEFINEBUTTON2, parseSWFDEFINEFONT, parseSWFDEFINEFONTINFO, parseSWFDEFINELOSSLESS, parseSWFDEFINESPRITE, parseSWFDEFINETEXT, parseSWFDOACTION, parseSWFFILLSTYLEARRAY, parseSWFFRAMELABEL,...

Toppydo Input Validation Vulnerability

topdo is a to-do list management application. An input validation vulnerability exists in the 'ListFormatParser::parse' function in the topdo/lib/ListFormat.py file in topdo. The vulnerability can be exploited to inject arbitrary bytes into the endpoint with the help of a todo.txt file with one o...

CVE-2018-1000523

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

CVE-2018-1000523: Improper Input Validation

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

PT-2018-9420

Name of the Vulnerable Software and Affected Versions topydo affected versions not specified Description The issue is related to improper input validation in the ListFormatParser::parse function, located in the topydo/lib/ListFormat.py file. This can lead to the injection of arbitrary bytes to th...

Input validation

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

Libmobi Information Disclosure Vulnerability (CNVD-2018-16956)

Libmobi is used to process Mobipocket/Kindle MOBI e-book format document C library . An information disclosure vulnerability exists in the mobiparseindexentry function in index.c in Libmobi version 0.3. A remote attacker can exploit this vulnerability to obtain information via specially crafted...

CVE-2018-12558: Inefficient Algorithmic Complexity

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

PT-2018-11250

Name of the Vulnerable Software and Affected Versions Email::Address module versions through 1.909 Description The issue concerns the parse method in the Email::Address module, which is susceptible to algorithmic complexity when processing specially prepared input. This can lead to a Denial of...

PT-2018-10783

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause an information disclosure via a crafted mobi file, specifically through a heap-based buffer over-read in the mobi parse index entry function. Recommendations For Libmob...

rtorrent 0.9.6 - Denial of Service Exploit

Exploit for linux platform in category dos / poc Exploit Title: rtorrent 0.9.6 - Denial of Service Exploit Author: ecx86 Vendor Homepage: http://rtorrent.net Software Link: https://github.com/rakshasa/rtorrent/releases Version: I', lenmsg crash += msg s = socket.socketsocket.AFINET,...

rtorrent 0.9.6 - Denial of Service

rtorrent 0.9.6 - Denial of Service Exploit Title: rtorrent 0.9.6 - Denial of Service Date: 2018-01-10 Exploit Author: ecx86 Vendor Homepage: http://rtorrent.net Software Link: https://github.com/rakshasa/rtorrent/releases Version: I', lenmsg crash += msg s = socket.socketsocket.AFINET,...

rtorrent 0.9.6 - Denial of Service

Exploit Title: rtorrent 0.9.6 - Denial of Service Date: 2018-01-10 Exploit Author: ecx86 Vendor Homepage: http://rtorrent.net Software Link: https://github.com/rakshasa/rtorrent/releases Version: I', lenmsg crash += msg s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connect'1.3.3.7', 6890...