CVE-2021-47895

Nsauditor 3.2.2.0 is affected by a denial-of-service vulnerability where overwriting the Event Description field with a large buffer can crash the application. Proof-of-concept uses a 10,000-character 'U' buffer pasted into the Event Description field. Impact is a local crash; no details on a ven...

CVE-2021-47815

CVE-2021-47815 (Nsauditor 3.2.3) has a denial-of-service vulnerability in the registration code input field. The issue allows an attacker to crash the application by pasting a large buffer (256 repeated characters) into the Key field, as described in the NVD entry. The connected documents corrobo...

CVE-2018-25213

CVE-2018-25213 affects Nsauditor 3.0.28.0. The vulnerability is a structured exception handling (SEH) buffer overflow in the DNS Lookup tool that enables local attackers to achieve code execution with the application’s privileges by supplying specially crafted input to the DNS Query field. The de...

CVE-2019-25597

NSauditor 3.1.2.0 contains a buffer overflow in the SNMP Auditor Community field, allowing local attackers to crash the application by supplying an oversized string. The attack can be triggered by pasting a large payload into the Community field and invoking the Walk function, resulting in a deni...

CVE-2020-37119

CVE-2020-37119 affects Nsauditor 3.0.28 and 3.2.1.0. A buffer overflow in the DNS Lookup tool allows an attacker to overwrite memory with a crafted DNS query payload, bypass ASLR, and execute shellcode. Reported exploit details indicate a three-byte overwrite, with potential for arbitrary code ex...

CVE-2020-37130

CVE-2020-37130 affects Nsauditor 3.2.0.0. The vulnerability is a denial-of-service in the registration name input field: pasting a malicious payload of 1000 repeated characters can crash the application, impacting availability. Connected PT-2026-6574 documents confirm the same issue and recommend...