Tag: BufferOverflow

  • Vulnerability Watch No64

    FreeIPMI Critical Buffer Overflow Exposes FRU Handling • FreeIPMI Dell OEM Command Buffer Overflow Found • FreeIPMI Dell CMC Info Parser Hit by Critical Flaw • FreeIPMI iDRAC Parser Vulnerability Rated Critical • FreeIPMI Fujitsu Response Parsing Issue Discovered…

  • Vulnerability Watch No63

    Critical TOTOLINK NR1800X Buffer Overflow Exposes Remote Attack Surface • Medicine Delivery Password Recovery Hit by SQL Injection • Product Category Filter in Medicine Delivery App Vulnerable to SQL Injection • AshPhoenix Tenant Authorization Bug Can Bypass Scoped Access Checks • Medicine Delivery Product Detail Page Exposes SQL Injection…

  • Vulnerability Watch No61

    NLTK XML Parser Weakness Causes Denial of Service • node-poppler Flaw Allows Remote Argument Injection • Critical OCPP Buffer Overflow Threatens EV Charging Clients • WordPress InfusedWoo Pro Bug Enables Account Takeover • NLTK Deserialization Flaw Enables Python Code Execution…

  • Vulnerability Watch No60

    AWX Archive Extraction Path Traversal • HCL Hive Third-Party Component Vulnerability • GIMP PCX Plugin Memory Corruption Bug • rConfig Authentication Bypass Creates Admin Accounts • NetworkManager WPA-Enterprise Validation Flaw…

  • Vulnerability Watch No54

    acmailer Authorization Flaw Enables Admin-Level Sub-Accounts • Atarim WordPress Plugin File Deletion Can Lead to RCE • TRENDnet Router Ping Interface Exposed to Command Injection • armeria-xds TLS Verification Flaw Enables MITM Attacks • TRENDnet TEW-823DRU Admin Endpoint Allows Command Injection…

  • Vulnerability Watch No50

    GL.iNet Routers Hit by Remote NAS Command Injection • Public Exploit Targets Edimax WAN Command Injection • Edimax Access Point Command Injection Exploit Goes Public • Critical ipTIME Authentication Bypass Has Public Exploit • Planet9 File Permissions Enable SYSTEM Privilege Escalation…

  • Vulnerability Watch No45

    CrateDB Blob API Bypasses Table Privileges • Malicious Projects Can Trigger Code Execution in Cortex MCP • Recursive Jinja Rendering Enables Command Execution in compliance-trestle • Public Exploit Targets TOTOLINK A800R DHCP Handler • Public Exploit Exposes TOTOLINK A800R IPv6 Stack Overflow…

  • Vulnerability Watch No44

    Tenda G0 Port Mapping Flaw Enables Remote Buffer Overflow • Tenda G0 Static Route Bug Triggers Remote Stack Overflow • Tenda G0 Port Mirroring Endpoint Hit by Buffer Overflow • Tenda AC1206 Guest Wi-Fi Handler Exposed to Remote Overflow • Tenda AC1206 Device Naming Flaw Enables Remote Buffer Overflow…

  • Vulnerability Watch No38

    Critical SQL Injection Hits Travel Agency Management System • ASUS Utility Flaw Can Enable Local Privilege Escalation • Hard-Coded Key Puts SAP BusinessObjects Credentials at Risk • SAP ABAP Authorization Flaw Exposes Database Operations • SAP Approuter Token Validation Flaw Can Leak Credentials…

  • Vulnerability Watch No29

    Forminator Upload-Record Flaw Enables Stored XSS • File Manager Flaw Can Delete Server Files and Enable RCE • NanoClaw Path Traversal Exploit Is Public • LettaBot API Status Route Lacks Authentication • Super Agent Party Proxy Route Exposes SSRF Flaw…