426 matches found
CVE-2021-41959
JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, which causes a memory leak...
TP-Link WR886N 安全漏洞
The TP-Link TL-WR886N is a wireless router from China P&L. A stack overflow vulnerability exists in the TP-Link TL-WR886N /cloudconfig/routerpost/getregverifycode, which can be exploited by a remote attacker to submit a special request that can crash an application or can be used to execute...
PT-2022-2223
Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8 Description A Buffer Overflow issue exists in the /cloud config/router post/check reg verify code function, which could allow a remote malicious user to execute arbitrary code via a crafted post request...
PT-2022-2227
Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8 Description The issue is caused by a buffer overflow on the stack in the /cloud config/router post/get reg verify code feature of the TP-LINK WR-886N router's firmware. This allows a remote attacker to...
PT-2022-13471
Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.6.6 Description The issue is related to a Use After Free condition in the r reg get name idx function. This condition can potentially lead to exploitation. Recommendations For versions prior to 5.6.6, update to...
GSD-2022-1000613 arm64: extable: fix load_unaligned_zeropad() reg indices
arm64: extable: fix loadunalignedzeropad reg indices This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...
PT-2022-7488
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a crash due to out of bounds access into reg2btf ids in the Linux kernel's bpf component. This occurred after a commit added kfunc support and defined reg2btf ids...
PT-2025-8155
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs when changing RX ring parameters using ethtool, which triggers kernel warnings. The igc ethtool set ringparam...
CVE-2021-46477
Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...
Microsoft Windows .Reg File - Dialog Spoof / Mitigation Bypass
Exploit Title: Microsoft Windows .Reg File - Dialog Spoof / Mitigation Bypass Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSREGFILEDIALOGSPOOFMITIGATIONBYPASS.txt twitter.com/hyp3rlinx ISR: ApparitionSe...
PT-2021-27198
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue concerns a kernel address leakage in atomic cmpxchg's r0 aux reg. This problem was introduced in version v5.12 and is fixed in Linux Kernel version v5.15.11. The actual impact and...
PT-2021-23138 · Unknown +1 · Freeswitch +1
Name of the Vulnerable Software and Affected Versions: FreeSWITCH versions prior to 1.10.7 Description: The issue allows an attacker to perform a SIP digest leak attack against FreeSWITCH, potentially recovering gateway passwords by exploiting the challenge response of a gateway configured on the...
reg-ngice.ngice.mpg.de Cross Site Scripting vulnerability OBB-2137288
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
[SECURITY] Fedora 34 Update: hivex-1.3.21-1.fc34
Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' in perl-hivex lets you export and merge to...
Fedora: Security Advisory for hivex (FEDORA-2021-775b170f95)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-26153
A cross-site scripting XSS vulnerability in wp-content/plugins/event-espresso-core-reg/adminpages/messages/templates/eemsgadminoverview.template.php in the Event Espresso Core plugin before 4.10.7.p for WordPress allows remote attackers to inject arbitrary web script or HTML via the page paramete...
PT-2021-7354
Name of the Vulnerable Software and Affected Versions QEMU versions prior to 6.1.0 Description The issue is related to an integer overflow in the QEMU implementation of VMWare's paravirtual RDMA device. It occurs due to improper input validation while handling a "PVRDMA REG DSRHIGH" write from th...
Improper Authentication
Apollos Apps is an open source platform for launching church-related apps. In Apollos Apps, new user registrations are able to access anyone's account by only knowing their basic profile information name, birthday, gender, etc. This includes all app functionality within the app, as well as any...
Remote Command Execution
reg-keygen-git-hash-plugin is vulnerable to remote command execution. An attacker is able to inject and execute arbitrary OS commands via various functions in git-cmd-client.ts...
GHSA-49Q3-8867-5WMP Remote Command Execution in reg-keygen-git-hash-plugin
Impact reg-keygen-git-hash-plugin through 0.10.15 allow remote attackers to execute of arbitrary commands. Patches Upgrade to version 0.10.16 or later. For more information If you have any questions or comments about this advisory: - Open an issue in reg-viz/reg-suit...