543 matches found
Buffer Overflow
libexiv2.so is vulnerable to buffer overflow. The vulnerability exists when datasize is less than headersize in the WebPImage::getHeaderOffset function of webpimage.cpp, allowing an attacker to cause an application crash through the integer overflow by providing a malicious input...
Denial Of Service (DoS)
libtasn1.so is vulnerable to denial of service. An attacker is able to cause 100% CPU usage via parsing a malicious file through the asn1expandobjectidptree function, resulting in denial of service...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service. The vulnerability exists due to a segmentation fault in the Image::printIFDStructure function in image.cpp which allows an attacker to crash the application via malicious tiff file...
Heap-based Buffer Overflow
libexiv2.so is vulnerable to heap-based buffer overflows. The vulnerability exists due to a null pointer dereference in quicktimevideo.cpp which allows an attacker to cause buffer overflows resulting in an application crash...
Denial Of Service (DoS)
libosip2.so is vulnerable to denial of service. The vulnerability exists in the osipbodyparseheader function of osipbody.c, allowing an attacker to cause an application crash through the integer overflow...
Default configuration
An issue was discovered in Zimbra Collaboration ZCS 8.8.x and 9.x e.g., 8.8.15. The Sudo configuration permits the zimbra user to execute the NGINX binary as root with arbitrary parameters. As part of its intended functionality, NGINX can load a user-defined configuration file, which includes...
wir-waren-so-frei.de Cross Site Scripting vulnerability OBB-2887215
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
suzukivision.com Cross Site Scripting vulnerability OBB-2867508
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Out-of-bounds Write
libhdf5.so is vulnerable to out-of-bound write. The vulnerability exists due to a heap based buffer overflow in decompress function in decompress.c which allows an attacker to submit a malicious gif file into the system and perform out of bound writes...
CVE-2022-37393
Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root...
Design/Logic Flaw
Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root...
CVE-2022-37393
CVE-2022-37393: Zimbra’s sudo configuration allows the zimbra user to run the zmslapd binary as root with arbitrary parameters. zmslapd can load a user-defined configuration file that may include plugins (.so) executed as root, enabling local privilege escalation. The available connected document...
Zimbra zmslapd Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zimbra zmslapd arbitrary module load', 'Description' = %q This module exploits CVE-2022-37393, which is a vulnerability in Zimbra's sudo...
Cross-site Scripting (XSS)
libxml2.so is vulnerable to cross-site scripting. The vulnerability exists in the htmlAttrDumpOutput function in HTMLtree.c due to a lack of sanitization in the escaped variable which allows an attacker to inject and execute malicious javascript...
CVE-2022-34972
CVE-2022-34972 affects So Filter Shop By (OpenCart) v3.x, exposing multiple blind SQL injection vulnerabilities via the att_value_id, manu_value_id, opt_value_id, and subcate_value_id parameters in /index.php?route=extension/module/so_filter_shop_by/filter_data. Root cause: unsafely constructed S...
So Filter Shop By SQL注入漏洞
So Filter Shop By is an advanced AJAX product filter for OpenCart. A SQL injection vulnerability exists in the So Filter Shop By v3.x series of releases that stems from issues with the attvalueid, manuvalueid, optvalueid, and subcatevalueid parameters...
OpenCart 3.x So Filter Shop By SQL Injection Vulnerability
Exploit Title: OpenCart v3.x So Filter Shop By - Blind SQL Injection Exploit Author: Saud Alenazi Vendor Homepage: https://www.opencart.com/ Software Link: https://codecanyon.net/item/so-filter-shop-by-responsive-opencart-module/13945633 Version: V3.X Tested on: XAMPP, Linux Contact:...
OpenCart 3.x So Filter Shop By SQL Injection
Exploit Title: OpenCart v3.x So Filter Shop By - Blind SQL Injection Date: 28/06/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.opencart.com/ Software Link: https://codecanyon.net/item/so-filter-shop-by-responsive-opencart-module/13945633 Version: V3.X Tested on: XAMPP, Linux...
TOTOLINK EX1200T Remote Command Injection Vulnerability
TOTOLINK EX1200T is a wireless signal booster. a remote command injection vulnerability exists in the setDiagnosisCfg function in the lib/cstemodules/system.so file in TOTOLINK EX1200T V4.1.2cu.5215. An attacker can exploit this vulnerability to take control of ipDoamin...
