PolyDrop

BYOSI - Bring-Your-Own-Script-Interpreter - Leveraging the abuse of trusted applications, one is able to deliver a compatible script interpreter for a Windows, Mac, or Linux system as well as malicious source code in the form of the specific script interpreter of choice. Once both the malicious...

cairo:script_interpreter_fuzzer: Heap-buffer-overflow in csi_string_new

Detailed Report: https://oss-fuzz.com/testcase?key=6461277479436288 Project: cairo Fuzzing Engine: afl Fuzz Target: scriptinterpreterfuzzer Job Type: aflasancairo Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x792f1b0b2200 Crash State: csistringnew csistringdeflatenew...

PT-2026-40476

Уязвимость интерпретатора скриптов Lua системы управления базами данных СУБД Redis связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

cairo:script_interpreter_fuzzer: Null-dereference READ in _scan_file

Detailed Report: https://oss-fuzz.com/testcase?key=5525046994206720 Project: cairo Fuzzing Engine: afl Fuzz Target: scriptinterpreterfuzzer Job Type: aflasancairo Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: scanfile csiscanfile csiobjectexecute...

CVE-2021-32586

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests...

ROS-20250203-12

A vulnerability in the ldebug.c component of the Lua script interpreter involves an integer loss of significance. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20250203-11

A vulnerability in the luaupvaluejoin function lapi.c of the Lua script interpreter is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service Vulnerability in the luaresume ldo.c component of the Lua...

CVE-2021-32586

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests...

CVE-2021-32586: Improper Input Validation

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests...

PT-2022-10087

Name of the Vulnerable Software and Affected Versions FortiMail versions prior to 7.0.1 Description The issue is related to improper input validation in the web server CGI facilities, which may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via...

Fortinet FortiMail: Input validation error vulnerability

Fortinet FortiMail is a suite of email security gateway products from Fortinet, Inc. The product provides email security protection and data protection, among other features.An input validation error vulnerability exists in the FortiMail Web server CGI facility. An unauthenticated attacker could...

TCL-script interpreter DoS

The vulnerability of the TCL-script interpreter for Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Fedora 28 : glibc (2018-264d881a62)

This updates contains various updates from the upstream glibc 2.27 release branch, including minor fixes for the realpath function and the i386 memmove implementation. Python helper scripts in the glibc-benchtests subpackage now use /usr/bin/python3 as the script interpreter RHBZ1577223. Starting...

eQ-3 AG HomeMatic CCU2 Remote Code Execution Vulnerability (CNVD-2018-05831)

The eQ-3 AG Homematic CCU2 is a central control unit for controlling smart home devices from the German company eQ-3. tcl script interpreter is one of the script interpreters for the TCL language. A remote code execution vulnerability exists in the TCL script interpreter in eQ-3 AG Homematic CCU2...

CVE-2018-7297

Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

Design/Logic Flaw

Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

CVE-2018-7297

Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

CVE-2018-7297

The eQ-3 AG Homematic CCU2 (version 2.29.2 and earlier ) is vulnerable to Remote Code Execution (RCE) due to security deficiencies in the TCL script interpreter used for microprogrammed software. An unauthenticated attacker with access to the web interface can exploit this flaw to obtain read/wri...

CVE-2018-7297: Undefined Security Weakness

Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

PT-2018-1169

Name of the Vulnerable Software and Affected Versions eQ-3 AG Homematic CCU2 versions 2.29.2 and earlier Description The issue is related to a Remote Code Execution vulnerability in the TCL script interpreter. This allows remote attackers to obtain read/write access and execute system commands on...