CVE-2019-25078

CVE-2019-25078 affects pacparser up to 1.3.x. The vulnerable component is the function pacparser_find_proxy in src/pacparser.c, where manipulating the url argument leads to a buffer overflow. Local access is required for exploitation. A fix is available in pacparser 1.4.0, with patch identified b...

CVE-2023-37360

Pacparser ( Pacparser ) before 1.4.2 is affected by CVE-2023-37360 through the function pacparser_find_proxy. The vulnerability arises when the attacker controls the URL, enabling JavaScript injection and potentially privilege escalation within enterprise security product scenarios. The provided ...