Heap overflow

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bitwriteTF in bits.c...

PT-2020-10873

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.9.4 Description An issue was discovered in GNU LibreDWG where crafted input leads to a heap-based buffer over-read in the bit write TF function in bits.c. Recommendations For GNU LibreDWG versions prior to 0.9....

PT-2020-20316

Name of the Vulnerable Software and Affected Versions CHIYU BF-430 232/485 TCP/IP Converter versions prior to 1.16.00 Description A stored XSS issue was found, as demonstrated by the "/if.cgi" API endpoint, specifically the TF submask field. Recommendations For versions prior to 1.16.00, update t...

CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting Vulnerability

Exploit for cgi platform in category web applications Exploit Title: CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting Google Dork: In Shodan search engine, the filter is "CHIYU" Exploit Author: Luca.Chiou Vendor Homepage: https://www.chiyu-t.com.tw/en/ Version: BF430 232/485 TCP/IP...

PT-2018-2821

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the Linux kernel's implementation of the if usb probe handler in the libertas tf usb.ko module. An attacker can exploit this by connecting a...

Exploit

Description List of My Exploits : CVE-201...

PT-2017-17784

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.12 Description A flaw was found in the way the KVM module processed the trap flag TF bit in EFLAGS during emulation of the syscall instruction. This leads to a debug exception DB being raised in the guest stack...

Directory traversal

Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers to read and delete arbitrary files via the tmpfname parameter to 1 logmgtadhocqueryajaxhandler.php, 2...

PT-2017-8951

Name of the Vulnerable Software and Affected Versions Trend Micro Smart Protection Server versions 2.5 before build 2200 Trend Micro Smart Protection Server versions 2.6 before build 2106 Trend Micro Smart Protection Server versions 3.0 before build 1330 Description The issue allows remote...

PT-2016-4880

Name of the Vulnerable Software and Affected Versions Micro Focus Novell Service Desk versions prior to 7.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via certain...

TF: Fast Light - Exported components, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application TF: Fast Light published at the 'play' market has multiple vulnerabilities...

TF: Screen Light Classic - External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application TF: Screen Light Classic published at the 'play' market has multiple vulnerabilities...

TF: LED Light Classic - External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application TF: LED Light Classic published at the 'play' market has multiple vulnerabilities...

PT-2012-2121

Name of the Vulnerable Software and Affected Versions Open Business Management OBM versions 2.3.20 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters. Specifically, the tf name, tf delegation, and tf ip parameters to the...

CVE-2011-3490

Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long command to port 11234, as demonstrated with the TF command...

CVE-2002-1319

The CVE-2002-1319 issue affects the Linux kernel on x86, specifically versions 2.4.20 and earlier and 2.5.x. The root cause is a flaw in emulation mode where TF and NT EFLAGS are not properly cleared, enabling a local user to cause a denial of service (hang). The impact is a local DoS without rem...

CVE-2002-1319: Undefined Security Weakness

The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service hang via the emulation mode, which does not properly clear TF and NT EFLAGs...