Denial Of Service (DoS)

libexiv2.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the PngImage::printStructure function at pngimage.cpp due to a buffer overflow which allows an attacker to cause an application crash...

Use After Free

libz3.so is vulnerable to Use After Free. The vulnerability exists in the pddsimplifier.cpp when the solver attempts to simplify the constraints, which causes unexpected memory access, leading to segmentation faults or arbitrary code execution...

Double Free

libkrb5.so is vulnerable to Double Free. The vulnerability exists due to a failure in authorization data handling in the dotgsreq.c, which allows an attacker to cause the Key Distribution Center KDC to free the same pointer twice when incorrect data is copied from one ticket to another...

Integer Overflow

libImlib2.so is vulnerable to Integer Overflow. The vulnerability exists due to invalid memory allocations which allows an attacker to cause an overflow and out-of-bound reads...

Denial Of Service (DoS)

libbind9.so is vulnerable to Denial Of Service DoS. The vulnerability exists when debug logging is turned on, due to assertion errors in renderecs which allows an attacker to cause an application crash...

Hardcoded credentials

An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...

CVE-2023-22957

An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...

PT-2023-18798

Name of the Vulnerable Software and Affected Versions AudioCodes VoIP desk phones versions 3.4.4.1000 and earlier Description An issue was discovered in libac des3.so due to the use of a hard-coded cryptographic key. This allows an attacker with access to backup or configuration files to decrypt...

CVE-2023-22957: Use of Hard-coded Credentials

An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...

Heap-based Buffer Overflow

libmp4v2.so is vulnerable to Heap-based Buffer Overflow. The vulnerability is due to not validating the input parameter newSize of function Resize in the file mp4array.h . This can lead to buffer overflow while allocating memory to MP4Array array...

Denial Of Service (DOS)

libbzip3.so is vulerable to Denial Of Service. The vulnerability is due to not setting zeroed temporary array while interacting with libsais in the function bz3new in file libbz3.c resulting in Denial Of Service attack...

Out-of-bounds Read

libbzip3.so is vulnerable to Out-of-bounds Read. The vulnerability is due to not validating input parameters correctly in the function process inside main.c file. This leads to out-of-bounds-read...

kappel-so.ch Cross Site Scripting vulnerability OBB-3513379

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Denial Of Service (DoS)

libX11.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a memory corruption in multiple functions of src/InitExt.c because they do not check array limits properly causing an out-of-bounds which allows an attacker to crash the application...

Denial Of Service (DoS)

libbind9.so is vulnerable to Denial Of Service. The vulnerability exists if the recursive-clients quota is reached on a BIND 9 resolver configured with both stale-answer-enable yes and stale-answer-client-timeout 0, which leads to a sequence of serve-stale-related lookups could cause the named to...

Denial Of Service (DoS)

libbind9.so is vulnerable to Denial Of Service. The vulnerability exists because the named instance is configured to run as a DNSSEC-validating recursive resolver with the aggressive use of the DNSSEC-Validated cache RFC 8198 option synth-from-dnssec enabled, allowing an attacker to remotely...

so-fa.fr Cross Site Scripting vulnerability OBB-3474767

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Newly Surfaced ThirdEye Infostealer Targeting Windows Devices

By Waqas For now, ThirdEye infostealer has demonstrated behavior that is highly malicious, albeit not-so-sophisticated in its patterns. This is a post from HackRead.com Read the original post: Newly Surfaced ThirdEye Infostealer Targeting Windows Devices...

Denial Of Service (DoS)

libbind9.so is vulnerable to Denial Of Service. The vulnerability exists due to improper memory management in the cache, which allows an attacker to effectively bypass the max-cache-size configuration statement...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial of Service DoS. The vulnerability exists in via MP4File::ReadString at mp4fileio.cpp because the memory allocation is not properly implemented which allows an attacker to cause memory leaks resulting in an application crash...