CVE-2025-8852 WuKongOpenSource WukongCRM API Response upload information exposure

A vulnerability was identified in WuKongOpenSource WukongCRM 11.0. This affects an unknown part of the file /adminFile/upload of the component API Response Handler. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit ha...

Malicious code in servicecore-response-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efae7348c792464442a5508d7cd2907cd55c01835e4cc188b1e078b1b96beadc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3083 Malicious code in servicecore-response-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efae7348c792464442a5508d7cd2907cd55c01835e4cc188b1e078b1b96beadc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the DNS Response Handler component of the Universal Monitoring System Agent in Zabbix allows a attacker to trigger buffer overflows.

The vulnerability of the DNS Response Handler component of the Zabbix universal monitoring agent is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a buffer overflow...

PT-2023-8401 · Unknown +5 · Dns Server +5

Name of the Vulnerable Software and Affected Versions: DNS server affected versions not specified Description: The issue is caused by an improper check for RDLENGTH overflow in the buffer in response from the DNS server. This can lead to a buffer overflow. The vulnerability is related to...

Code injection

cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler SEC-191...

Escape Sequence Injection

Ruby is vulnerable to escape sequence injection. This exists in the function Gem::GemcutterUtilitieswithresponse of the component API Response Handler. Gem::GemcutterUtilitieswithresponse may output the API response to stdout without any change. Modifications in the response from API side may cau...

Escape Sequence Injection

Ruby is vulnerable to escape sequence injection vulnerability. The vulnerability exists in an unknown code block of the component API Response Handler when gem owner command outputs the contents of the API response directly to stdout. An attacker could cause an escape sequence injection via a...

Google Android Buffer Overflow Vulnerability (CNVD-2018-19573)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in 'wmananrspeventhandler' in Android. An attacker could exploit the vulnerability to execute arbitrary code or cause a denial of service...

Google Android Memory Misreference Vulnerability (CNVD-2019-24189)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A memory misreference vulnerability exists in the 'wmavdevstartresphandler' function in Android. An attacker can exploit the vulnerability to occur a possible free-use message typ...

Design/Logic Flaw

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack fo check on return value in WMA response handler can lead to potential use after free...

wpa_supplicant/hostapd eap_server/eap_server_pwd.c eap_pwd_process_commit_resp() out-of-bounds read vulnerability

hostapd is a user-state daemon for APs and authentication servers. wpasupplicant is a WiFi-capable component for Android that supports authentication of wireless connections. hostapd eapserver/eapserverpwd.c An out-of-bounds read vulnerability exists in the eappwdprocesscommitresp function when...