4 matches found
CSV Injection
Overview Affected versions of this package are vulnerable to CSV Injection in the writeData process. An attacker can achieve code execution on an administrator's workstation by planting specially crafted payloads in text fields, which are then exported to CSV and executed when opened in spreadshe...
CVE-2024-2331
A vulnerability was found in SourceCodester Tourist Reservation System 1.0. It has been declared as critical. This vulnerability affects the function adwritedata of the file System.cpp. The manipulation of the argument adcode leads to buffer overflow. The attack can be initiated remotely. The...
PT-2024-19801 · Sourcecodester · Sourcecodester Tourist Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Tourist Reservation System version 1.0 Description: A critical issue has been found in the system, affecting the ad writedata function of the System.cpp file. The manipulation of the ad code argument leads to a buffer overflow...
VUPEN Security Research - Google Chrome "Clipboard::WriteData()" Function Sandbox Escape (Pwn2Own)
VUPEN Security Research - Google Chrome Clipboard Format Processing Sandbox Escape Pwn2Own Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Google Chrome is a freeware web browser developed by Google. Chrome version 28 and beyond uses the WebK...