Tag: BufferOverflow

  • Vulnerability Watch No70

    WooCommerce Plugin Flaw Exposes Arbitrary Files • WordPress Plugin Bug Enables Account Takeover • Editor Upload Vulnerability May Enable Code Execution • Velociraptor Backup Flaw Allows Elevated Query Execution • Critical Permission Bypass Impacts Endpoint Control…

  • Vulnerability Watch No69

    VLC Image Decoder Flaw Causes Buffer Overflow Risk • CommonMark Parser Bug Enables Denial of Service • PocketMine-MP Login Processing Bug Crashes Servers • PocketMine-MP JSON Parser Issue Causes Remote Crashes • PocketMine-MP Null Handling Flaw Disrupts Servers…

  • Vulnerability Watch No64

    FreeIPMI Critical Buffer Overflow Exposes FRU Handling • FreeIPMI Dell OEM Command Buffer Overflow Found • FreeIPMI Dell CMC Info Parser Hit by Critical Flaw • FreeIPMI iDRAC Parser Vulnerability Rated Critical • FreeIPMI Fujitsu Response Parsing Issue Discovered…

  • Vulnerability Watch No63

    Critical TOTOLINK NR1800X Buffer Overflow Exposes Remote Attack Surface • Medicine Delivery Password Recovery Hit by SQL Injection • Product Category Filter in Medicine Delivery App Vulnerable to SQL Injection • AshPhoenix Tenant Authorization Bug Can Bypass Scoped Access Checks • Medicine Delivery Product Detail Page Exposes SQL Injection…

  • Vulnerability Watch No61

    NLTK XML Parser Weakness Causes Denial of Service • node-poppler Flaw Allows Remote Argument Injection • Critical OCPP Buffer Overflow Threatens EV Charging Clients • WordPress InfusedWoo Pro Bug Enables Account Takeover • NLTK Deserialization Flaw Enables Python Code Execution…

  • Vulnerability Watch No60

    AWX Archive Extraction Path Traversal • HCL Hive Third-Party Component Vulnerability • GIMP PCX Plugin Memory Corruption Bug • rConfig Authentication Bypass Creates Admin Accounts • NetworkManager WPA-Enterprise Validation Flaw…

  • Vulnerability Watch No54

    acmailer Authorization Flaw Enables Admin-Level Sub-Accounts • Atarim WordPress Plugin File Deletion Can Lead to RCE • TRENDnet Router Ping Interface Exposed to Command Injection • armeria-xds TLS Verification Flaw Enables MITM Attacks • TRENDnet TEW-823DRU Admin Endpoint Allows Command Injection…

  • Vulnerability Watch No50

    GL.iNet Routers Hit by Remote NAS Command Injection • Public Exploit Targets Edimax WAN Command Injection • Edimax Access Point Command Injection Exploit Goes Public • Critical ipTIME Authentication Bypass Has Public Exploit • Planet9 File Permissions Enable SYSTEM Privilege Escalation…

  • Vulnerability Watch No45

    CrateDB Blob API Bypasses Table Privileges • Malicious Projects Can Trigger Code Execution in Cortex MCP • Recursive Jinja Rendering Enables Command Execution in compliance-trestle • Public Exploit Targets TOTOLINK A800R DHCP Handler • Public Exploit Exposes TOTOLINK A800R IPv6 Stack Overflow…

  • Vulnerability Watch No44

    Tenda G0 Port Mapping Flaw Enables Remote Buffer Overflow • Tenda G0 Static Route Bug Triggers Remote Stack Overflow • Tenda G0 Port Mirroring Endpoint Hit by Buffer Overflow • Tenda AC1206 Guest Wi-Fi Handler Exposed to Remote Overflow • Tenda AC1206 Device Naming Flaw Enables Remote Buffer Overflow…