CVE-2021-44352

A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18multi device via the list parameter in a post request in goform/SetIpMacBind...

PT-2021-20896

Name of the Vulnerable Software and Affected Versions: tsMuxer version 2.6.16 Description: A heap-based buffer overflow was discovered in tsMuxer via the function HevcSpsUnit::short term ref pic setint in hevc.cpp. This issue can be exploited, but no details are provided about the estimated numbe...

CVE-2021-26777

Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIRCDCv1.2.17, allows attackers to execute arbitrary code...

CVE-2021-33271

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function sub80046EB4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request...

CVE-2021-33265

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80046eb4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request...

Prototype Pollution

Overview @fabiocaccamo/utils.js is a JavaScript utils for lazy devs. Affected versions of this package are vulnerable to Prototype Pollution via the set and method, which merges the path and value parameters based on the key:value. PoC const utils = require"@fabiocaccamo/utils.js"; const obj = ;...

PT-2021-26728

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.162 Description: The issue is related to a NULL dereference in the set hv tscchange cb function if Hyper-V setup fails. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2021-26792

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to the RDMA/core component, where send and receive CQ are not set before forwarding to the driver. The actual impact and attack plausibility have not yet been proven...

PT-2021-30723

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.162 Description The issue is related to a NULL dereference in the set hv tscchange cb function if Hyper-V setup fails. The actual impact and attack plausibility have not yet been proven. Recommendations For...

opencart 3.0.3.8 - Sessjion Injection Vulnerability

Exploit Title: opencart 3.0.3.8 - Sessjion Injection Exploit Author: Hubert Wojciechowski Contact Author: email protected Company: https://redteam.pl Vendor Homepage: https://www.opencart.com/ Software Link: https://www.opencart.com/ Version: 3.0.3.8 Testeted on: Windows 10 using XAMPP,...

PT-2021-26748

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.82 Description: The issue is related to a NULL dereference in the set hv tscchange cb function if Hyper-V setup fails. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2021-26779

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to a NULL dereference in the set hv tscchange cb function if Hyper-V setup fails. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2021-30743

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.82 Description The issue is related to a NULL dereference in the set hv tscchange cb function if Hyper-V setup fails. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2024-11489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential NULL pointer dereference in the ethtool set coalesce function. This function uses both the .get coalesce and .set coalesce callbacks, but the check fo...

CVE-2021-3939

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...

CVE-2021-3939

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...

UBUNTU-CVE-2021-3939

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...

OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

VulnCheck KEV: CVE-2016-11021

setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command...

kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function in drivers/net/wireless/marvell/mwifiex/join.c via a long SSID value

A flaw was found in the Linux kernel. The marvell wifi driver could allow a local attacker to execute arbitrary code via a long SSID value in mwifiexcmd80211adhocstart function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...