Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5179)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. An attacker can send a specially crafted packet to trigger the parsing of this cache file. This plugin only works with Tenable.ot...

Wago PFC200 iocheckd service 'I/O-Check' cache DNS code execution vulnerability (CVE-2019-5166)

An exploitable stack buffer overflow vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacke...

Siemens JT Open Toolkit security vulnerabilities

Siemens JT Open Toolkit Siemens JTTK is a C++ application programming interface API from Siemens, Germany. It provides support for 64-bit application development on Microsoft Windows, Linux and MacOS. Siemens JT Open Toolkit suffers from a stack buffer overflow vulnerability that can be exploited...

Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5181)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in cod...

mosquitto:broker_fuzz_test_config: Stack-buffer-overflow in mosquitto__hex2bin

Project: https://github.com/eclipse/mosquitto.git Detailed Report: https://oss-fuzz.com/testcase?key=4940854638018560 Project: mosquitto Fuzzing Engine: honggfuzz Fuzz Target: brokerfuzztestconfig Job Type: honggfuzzasanmosquitto Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

suricata:fuzz_siginit: Stack-buffer-overflow in strlcpy

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6303734667018240 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzsiginit Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Denial Of Service (DoS)

libde265 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack buffer overflow in the putqpelfallback function, allowing an attacker to cause an application crash through the maliciously crafted file...

net-snmp:snmp_config_fuzzer: Stack-buffer-overflow in __wrap_strlcpy

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5420875685167104 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpconfigfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

opensc:fuzz_pkcs15init: Stack-buffer-overflow in __wrap_strlcpy

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4691271135657984 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15init Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

net-snmp:snmp_transport_fuzzer: Stack-buffer-overflow in __wrap_strlcpy

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6316417839661056 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmptransportfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

CVE-2021-31578

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

CVE-2021-31578

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

Stack overflow

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

CVE-2021-31578

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

CVE-2021-31578

CVE-2021-31578 affects Boa and involves a stack buffer overflow. The consequence is remote escalation of privilege from a nearby attacker with no required privileges and no user interaction. The issue is attributed to Boa’s handling of stack buffers, enabling a proximal attacker to elevate privil...

D-Link DAP-2020 Code Execution

The vulnerability of D-Link DAP-2020 and DAP-1360 wireless access points’ microprogramming software is related to buffer overflow attacks on the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : EditorConfig Core C vulnerability (USN-5842-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5842-1 advisory. Mark Esler and David Fernandez Gonzalez discovered that EditorConfig Core C incorrectly handled memory when handling certain...

CVE-2021-31578: Out-of-bounds Write

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

zstd:simple_decompress: Stack-buffer-overflow in ZSTD_decompressBlock

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=4705446499057664 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: simpledecompress Job Type: libfuzzerasani386zstd Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address:...

PT-2023-1547 · Delta Electronics · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft versions 4.00.16.22 and prior Description: The issue is caused by a stack-based buffer overflow. This could allow an attacker to execute arbitrary code remotely when a specially crafted file is introduced to the...