Advantech WebAccess 'nvA1Media.ocx' Stack Buffer Overflow Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow vulnerability exists in Advantech...

[ASA-201805-1] powerdns: arbitrary code execution

Arch Linux Security Advisory ASA-201805-1 ========================================= Severity: High Date : 2018-05-09 CVE-ID : CVE-2018-1046 Package : powerdns Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-686 Summary ======= The package powerdns before...

PHP 7.2.x < 7.2.5 Stack Buffer Overflow

According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.5. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid109579;...

Stack overflow

Delta PMSoft versions 2.10 and prior have multiple stack-based buffer overflow vulnerabilities where a .ppm file can introduce a value larger than is readable by PMSoft's fixed-length stack buffer. This can cause the buffer to be overwritten, which may allow arbitrary code execution or cause the...

Hyland Perceptive Document Filters Stack Buffer Overflow Vulnerability

Hyland Perceptive Document Filters is a document conversion toolkit from Hyland Software. The product is able to recognize and extract metadata from documents, and supports the conversion of many types of documents. A stack buffer overflow vulnerability exists in version 11.4.0.2647 of Hyland...

Denial Of Service (DoS) Through Stack Buffer Overflow

librelp.so is vulnerable to denial of service DoS through stack-based buffer overflow attacks. The vulnerability exists in relpTcpChkPeerName of src/tcp.c where it was possible to overflow the call to snprintf when parsing a malicious x509 certificate, causing a denial of service DoS, and possibl...

imagemagick/ping_ptif_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5696698595672064 Project: imagemagick Fuzzer: libFuzzerimagemagickpingptiffuzzer Fuzz target binary: pingptiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

ALPINE-CVE-2017-2885

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability...

gif2apng 1.9 - .gif Stack Buffer Overflow

gif2apng 1.9 - .gif Stack Buffer Overflow Exploit Title: gif2apng 1.9 '.gif' Stack-Buffer Overflow Date: 20 April 2018 Exploit Author: Hamm3r.py Vendor Homepage: http://gif2apng.sourceforge.net/ Version: 1.9 Tested on: Ubuntu 16.04 CVE : gif2apng is vulnerable to a stack based buffer overflow whe...

CVE-2018-1145

A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi...

Design/Logic Flaw

A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi...

CVE-2018-1145

Affected product: Belkin N750 router (firmware 1.10.22). Vulnerable component: proxy.cgi handling crafted HTTP requests. Root cause: stack buffer overflow triggered by unauthenticated remote input. Impact (as stated): remote unauthenticated user can overflow a stack buffer; exploitation details n...

CVE-2018-1145

A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::KeyManager::SetMasterKey

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=4791101178249216 Project: openthread Fuzzer: aflopenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow...

Denial Of Service (DoS) Through Stack Buffer Overflow

libarchive.so is vulnerable to denial of service DoS through stack-based buffer overflow attacks. The vulnerability exists in safefprintf of tar/util.c when printing a filename can cause a buffer overflow when formatting a non-printable multi-byte character...

Ultra MiniHTTPd 1.2 - GET Remote Stack Buffer Overflow PoC

Ultra MiniHTTPd 1.2 - GET Remote Stack Buffer Overflow PoC...

imagemagick/encoder_dng_fuzzer: Stack-buffer-overflow in LibRaw::kodak_radc_load_raw

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5965403386806272 Project: imagemagick Fuzzer: aflimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

Denial Of Service (DoS) Through Stack Buffer Overflow

libtiff.so is vulnerable to denial of service DoS through stack-based buffer overflow. The vulnerability exists in the TIFFGetField function where a stack-based buffer overflow can occur, when parsing a tiff file, depending on whether a codec was enabled...

Dassault Systemes CATIA V5-6R2013 Stack Buffer Overflow Vulnerability

Dassault Systemes CATIA V5-6R2013 is a product design and experience solution from Dassault Systemes, France. The solution supports functions such as mechanical design, shape and molding design, and integrated product design. A stack buffer overflow vulnerability exists in Dassault Systemes CATIA...

imagemagick/encoder_heic_fuzzer: Stack-buffer-overflow in ParseHvcCAtom

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6266752318046208 Project: imagemagick Fuzzer: aflimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...