arbitrary low level call

Lines of code Vulnerability details Impact An attacker may perform call to an arbitrary address with controlled calldata Proof of Concept File: contracts\DepositHandler.sol: 23 if callee.code.length == 0 revert NotContract; 24: success, returnData = callee.calldata; 25 references: Tools Used vsco...

Synology Media Server Buffer Overflow Vulnerability

Synology Media Server is a media server. buffer overflow vulnerability exists in versions prior to Synology Media Server 1.8.1-2876, which stems from the existence of unchecked input size buffer replication in the cgi component, and can be exploited by remote attackers to execute arbitrary code v...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2136)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile...

Synology Media Server 安全漏洞

Synology Media Server is a media server. buffer overflow vulnerability exists in versions prior to Synology Media Server 1.8.1-2876, which stems from the existence of unchecked input size buffer replication in the cgi component, and can be exploited by remote attackers to execute arbitrary code v...

CVE-2022-27612

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2022-36450

Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without checking the URL...

CVE-2022-36450

Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without checking the URL...

Unchecked Return Value for transfer & transferFrom call

Lines of code Vulnerability details Impact It is good to add a require statement that checks the return value of token transfers or to use something like OpenZeppelin’s safeTransfer/safeTransferFrom unless one is sure the given token reverts in case of a failure. Failure to do so will cause silen...

The implementation of commands such as “execute restore image” and “execute certificate remote” in the command-line interface (CLI) of the Fortinet FortiManager device management software, along with the FortiAnalyzer network firewall, FortiOS operating systems, and the FortiProxy proxy server for protecting against internet attacks, allows a malicious individual to execute arbitrary code or perform arbitrary commands.

The vulnerability in the implementation of the “execute restore image” and “execute certificate remote” commands in the command-line interface CLI of the Fortinet FortiManager device management software, as well as in the FortiAnalyzer network switch, FortiOS operating systems, and the FortiProxy...

The vulnerability in the API for 3D graphics in WebGL browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to induce a service failure.

The vulnerability of the API for 3D graphics in WebGL browsers such as Firefox, Firefox ESR, and the email client Thunderbird lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions throug...

EulerOS Virtualization 2.10.0 : protobuf (EulerOS-SA-2022-2034)

According to the versions of the protobuf packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked ca...

Adobe RoboHelp 跨站脚本漏洞

Adobe RoboHelp is a help authoring tool developed and released for Windows by the American company Audobee Adobe. A cross-site scripting vulnerability exists in Adobe RoboHelp version 2020.0.7 and earlier, which stems from the program's lack of checksum filtering of user-supplied data and output...

Adobe Character Animator 缓冲区错误漏洞

Adobe Character Animator, a motion capture and animation tool from Adobe, is vulnerable to a buffer overflow vulnerability caused by a lack of proper validation of user-supplied data, which could be exploited to trigger a buffer overflow resulting in arbitrary code execution...

The vulnerability of the IOMobileFrameBuffer component in iOS and iPadOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the IOMobileFrameBuffer component in iOS and iPadOS systems stems from the buffer being copied without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Tenda AX1806 缓冲区错误漏洞

Tenda AX1806 is a WiFi6 wireless router from Tenda China.A stack overflow vulnerability exists in Tenda AX1806 V1.0.0.1, which stems from the formSetVirtualSer function not checking its length for input data. An attacker could exploit this vulnerability to cause a denial of service attack...

Tenda M3 缓冲区错误漏洞

Tenda M3 is an access controller from Tenda, China. Tenda M3 v1.0.0.12 is vulnerable to a stack overflow vulnerability, which stems from the fact that the items parameter of the formSetAccessCodeInfo function does not check the length of the input data. An attacker could exploit this vulnerabilit...

TOTOLINK T6 缓冲区错误漏洞

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the desc parameter in the FUN00412ef4 function not checking its length for input data. A remote attacker can exploi...

TOTOLINK T6 缓冲区错误漏洞

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.TOTOLINK T6 version V4.1.9cu.5179B20201015 is vulnerable to a stack overflow vulnerability, which originates from the desc, week, sTime, eTime parameters in the FUN004133c4 function for The input data is not checked f...

Tenda M3 缓冲区错误漏洞

Tenda M3 is an access controller from Tenda, China. Tenda M3 version V1.0.0.12 is vulnerable to a stack overflow vulnerability, which stems from the formSetAPCfg function op parameter not checking its length for input data. An attacker could exploit this vulnerability to cause a denial of service...

The vulnerability of Huawei CV81-WDM FW printer’s microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system command set. This vulnerability allows attackers to execute arbitrary operating system commands.

The vulnerability of Huawei CV81-WDM FW printer’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands...