CVE-2021-3156

CVE-2021-3156 In this document we include all the knowledge necessary in order to understand the code in this repository and why it works. All the explaination is based on the report created by QUALYS. There more forms of exploitation are explained. Requirements The vulnerable versions of sudo ar...

ROS-20260824-73-0004

The vulnerability of the parseargs function in Sudo system administration software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

CVE-2025-9384 appneta tcpreplay parse_args.c tcpedit_post_args null pointer dereference

A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpeditpostargs of the file /src/tcpedit/parseargs.c. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit is now public and may be used. Upgrading t...

CVE-2025-7569 Bigotry OneBase think_exception.tpl parse_args cross site scripting

A vulnerability was found in Bigotry OneBase up to 1.3.6. It has been declared as problematic. Affected by this vulnerability is the function parseargs of the file /tpl/thinkexception.tpl. The manipulation of the argument args leads to cross site scripting. The attack can be launched remotely. Th...

CVE-2025-7569 Bigotry OneBase think_exception.tpl parse_args cross site scripting

A vulnerability was found in Bigotry OneBase up to 1.3.6. It has been declared as problematic. Affected by this vulnerability is the function parseargs of the file /tpl/thinkexception.tpl. The manipulation of the argument args leads to cross site scripting. The attack can be launched remotely. Th...

CVE-2025-7569: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Bigotry OneBase up to 1.3.6. It has been declared as problematic. Affected by this vulnerability is the function parseargs of the file /tpl/thinkexception.tpl. The manipulation of the argument args leads to cross site scripting. The attack can be launched remotely. Th...