PT-2020-17109

Name of the Vulnerable Software and Affected Versions struct2json versions prior to 2020-11-18 Description The issue is related to a Buffer Overflow caused by the use of strcpy for S2J STRUCT GET string ELEMENT. Recommendations For versions prior to 2020-11-18, update to a version released after...

CVE-2020-29203: Buffer Copy without Checking Size of Input

struct2json before 2020-11-18 is affected by a Buffer Overflow because strcpy is used for S2JSTRUCTGETstringELEMENT...

PT-2020-18700

Name of the Vulnerable Software and Affected Versions Trading Technologies Messaging version 7.1.28.3 Description A flaw in the software relates to invalid parameter handling when calling strcpy s with an invalid parameter, specifically a long src string parameter, as part of processing a type 4...

Buffer overflow

Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017,...

CVE-2020-3616

CVE-2020-3616 describes a buffer overflow in Qualcomm Snapdragon display code caused by a memory copy using strcpy without length checking. Affected products include Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, and Wearables across APQ8017/8053/8096AU/8098, ...

PT-2020-17568

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions APQ8017 through SM8150 Description A buffer overflow issue exists in the display function due to a memory copy without checking the length of the size using the strcpy function. This issue affects various Qualcomm...

CVE-2020-3616: Buffer Copy without Checking Size of Input

Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017,...

CVE-2020-13389: Buffer Copy without Checking Size of Input

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...

PT-2020-11104

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 affected versions not specified Description A stack buffer overflow issue exists in the iocheckd service, specifically in the "I/O-Check" functionality. This can be triggered by sending a specially crafted packet, causing the...

CVE-2019-5186: Buffer Copy without Checking Size of Input

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1eb9c the extracted interface element name from the xml file is...

CVE-2019-5185: Out-of-bounds Write

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1ea28 the extracted state value from the xml file is used as a...

PT-2020-20399

Name of the Vulnerable Software and Affected Versions D-Link DIR-842 REVC version v3.13B09 HOTFIX Description A stack-based buffer overflow issue was discovered due to the use of strcpy for LOGINPASSWORD when handling a POST request to the "/MTFWU" endpoint. Recommendations For D-Link DIR-842 REV...

CVE-2020-8962: Out-of-bounds Write

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

libarchive security and bug fix update

3.3.2-7 - fix use-after-free in delayed newc link processing 1602575 - fix a few obvious resource leaks and strcpy misuses 1602575 3.3.2-6 - fixed use after free in RAR decoder 1700752 - fixed double free in RAR decoder 1700753 3.3.2-5 - release bump due to gating 1680768 3.3.2-4 - fix...

CVE-2019-16277

PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c...

ABC2MTEX 1.6.1 - Command Line Stack Overflow

ABC2MTEX 1.6.1 - Command Line Stack Overflow Exploit Title: ABC2MTEX 1.6.1 - Command Line Stack Overflow Date: 2019-08-13 Exploit Author: Carter Yagemann Vendor Homepage: https://abcnotation.com/abc2mtex/ Software Link:...

ABC2MTEX 1.6.1 Stack Overflow

Exploit Title: ABC2MTEX 1.6.1 - Command Line Stack Overflow Date: 2019-08-13 Exploit Author: Carter Yagemann Vendor Homepage: https://abcnotation.com/abc2mtex/ Software Link: https://github.com/mudongliang/source-packages/raw/master/CVE-2004-1257/abc2mtex1.6.1.tar.gz Version: 1.6.1 Tested on:...

ABC2MTEX 1.6.1 - Command Line Stack Overflow

Exploit Title: ABC2MTEX 1.6.1 - Command Line Stack Overflow Date: 2019-08-13 Exploit Author: Carter Yagemann Vendor Homepage: https://abcnotation.com/abc2mtex/ Software Link: https://github.com/mudongliang/source-packages/raw/master/CVE-2004-1257/abc2mtex1.6.1.tar.gz Version: 1.6.1 Tested on:...

ABC2MTEX 1.6.1 Stack Overflow Exploit

Exploit Title: ABC2MTEX 1.6.1 - Command Line Stack Overflow Exploit Author: Carter Yagemann Vendor Homepage: https://abcnotation.com/abc2mtex/ Software Link: https://github.com/mudongliang/source-packages/raw/master/CVE-2004-1257/abc2mtex1.6.1.tar.gz Version: 1.6.1 Tested on: Debian Buster An...

Memory corruption

Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...