Browsing the "string" Tag

Philips Hue Bridge up to 2.x 1935144020 ZCL String Heap-based memory corruption

January 25th, 2020 📆 | 8330 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: 1935144020 • based • bridge • corruption • memory • philips • string

Cayin SMP-PRO4 Connection String Test media_folder.cgi webpass information disclosure

January 14th, 2020 📆 | 3487 Views ⚑

A vulnerability classified as problematic has been found in Cayin SMP-PRO4 (the affected version unknown). This affects an unknown part

Tagged with: cayin • connection • folder • information • media • string • webpass

mruby 2.1.0 string.c mrb_str_len_to_dbl memory corruption

January 11th, 2020 📆 | 7333 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 3.69+ A vulnerability has been found in

Tagged with: corruption • memory • mruby • string

FTPGetter Professional 5.97.0.223 String NULL Pointer Dereference memory corruption

January 9th, 2020 📆 | 2485 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.0 $0-$5k 2.49+ A vulnerability has been found in

Tagged with: corruption • dereference • ftpgetter • memory • pointer • professional • string

LuquidPixels LiquiFire OS 4.8.0 URL String Server-Side Request Forgery

December 29th, 2019 📆 | 4442 Views ⚑

A vulnerability classified as critical has been found in LuquidPixels LiquiFire OS 4.8.0. Affected is an unknown code block of

Tagged with: forgery • liquifire • luquidpixels • request • server • string

libIEC61850 1.4.0 string_utilities.c StringUtils_createStringFromBuffer denial of service

December 25th, 2019 📆 | 2854 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 3.5 $0-$5k 4.79+ A vulnerability was found in libIEC61850

Tagged with: createstringfrombuffer • denial • libiec61850 • service • string • stringutils • utilities

TFTP Server SP up to 1.66 Error Packet logMess Format String

December 25th, 2019 📆 | 8202 Views ⚑

A vulnerability has been found in TFTP Server SP up to 1.66 (File Transfer Software) and classified as critical. This

Tagged with: error • format • logmess • packet • server • string

TFTP Server MT up to 1.65 Error Packet logMess Format String

December 25th, 2019 📆 | 6026 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: error • format • logmess • packet • server • string

cyrus-sasl 2.1.27 OpenLDAP common.c _sasl_add_string LDAP Packet denial of service

December 20th, 2019 📆 | 4019 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: common • cyrus • denial • openldap • packet • service • string

TemaTres 3.0 admin.php search_string cross site scripting

December 14th, 2019 📆 | 7742 Views ⚑

A vulnerability was found in TemaTres 3.0. It has been classified as problematic. This affects an unknown code of the

Tagged with: admin • cross • scripting • search • string • tematres

HTMLDOC 1.9.7 string.c hd_strlcpy() HTML Document memory corruption

December 8th, 2019 📆 | 3379 Views ⚑

A vulnerability, which was classified as critical, has been found in HTMLDOC 1.9.7. Affected by this issue is the function

Tagged with: corruption • document • htmldoc • memory • string • strlcpy

libarchive 3.4.0 archive_string.c archive_wstring_append_from_mbs memory corruption

November 23rd, 2019 📆 | 2386 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 7.88- A vulnerability, which was classified as

Tagged with: append • archive • libarchive • memory • string • wstring

gnusound 0.7.5 Format String [CVE-2012-0824]

November 20th, 2019 📆 | 3265 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 3.60+ A vulnerability was found in gnusound

Tagged with: format • gnusound • string

safe-svg up to 1.9.4 on WordPress String Recursion denial of service

November 12th, 2019 📆 | 7195 Views ⚑

A vulnerability has been found in safe-svg up to 1.9.4 on WordPress (WordPress Plugin) and classified as problematic. This vulnerability

Tagged with: denial • recursion • service • string • wordpress

Format String Vulnerabilities – PSW #625

November 1st, 2019 📆 | 3649 Views ⚑

Sven Morgenroth is the Security Researcher at Netsparker. Sven joins us again to talk about Formatting string vulnerabilities. To learn

Tagged with: format • string • vulnerabilities

FusionPBX up to 4.5.7 destination_imports.php query_string cross site scripting

October 25th, 2019 📆 | 3363 Views ⚑

A vulnerability was found in FusionPBX up to 4.5.7. It has been classified as problematic. Affected is an unknown functionality

Tagged with: cross • destination • fusionpbx • imports • query • scripting • string

FusionPBX up to 4.5.7 extension_imports.php query_string cross site scripting

October 25th, 2019 📆 | 5336 Views ⚑

A vulnerability was found in FusionPBX up to 4.5.7. It has been declared as problematic. Affected by this vulnerability is

Tagged with: cross • extension • fusionpbx • imports • query • scripting • string

Python up to 2.7.17/3.8.0 urllib2 urllib.request.urlopen Query String privilege escalation

October 25th, 2019 📆 | 2423 Views ⚑

A vulnerability was found in Python up to 2.7.17/3.8.0 (Programming Language Software). It has been rated as critical. This issue

Tagged with: python • query • request • string • urllib • urllib2 • urlopen

FusionPBX up to 4.5.7 contact_edit.php query_string cross site scripting

October 23rd, 2019 📆 | 5458 Views ⚑

A vulnerability, which was classified as problematic, was found in FusionPBX up to 4.5.7. Affected is an unknown code block

Tagged with: contact • cross • fusionpbx • query • scripting • string

FusionPBX up to 4.5.7 contact_import.php query_string cross site scripting

October 22nd, 2019 📆 | 3273 Views ⚑

A vulnerability, which was classified as problematic, was found in FusionPBX up to 4.5.7. This affects some unknown functionality of

Tagged with: contact • cross • fusionpbx • import • query • scripting • string

GNU Libidn2 up to 2.1.0 lib/lookup.c idn2_to_ascii_4i String memory corruption

October 21st, 2019 📆 | 3764 Views ⚑

A vulnerability was found in GNU Libidn2 up to 2.1.0. It has been declared as critical. Affected by this vulnerability

Tagged with: ascii • corruption • libidn2 • lookup • memory • string

A deep look at Stack Buffer Overflows and Format String Vulnerabilities

October 15th, 2019 📆 | 1512 Views ⚑

Philip Polstra 2019-10-15 20:41:26 source

Tagged with: buffer • format • overflows • stack • string • vulnerabilities

ImageMagick up to 7.0.8-54 MagickCore/string.c DestroyStringInfo memory corruption

October 14th, 2019 📆 | 8585 Views ⚑

A vulnerability was found in ImageMagick up to 7.0.8-54 (Image Processing Software). It has been classified as critical. This affects

Tagged with: corruption • destroystringinfo • imagemagick • magickcore • memory • string

Cybercriminals Leverage the U.K.’s Strong Customer Authentication Requirement in a New String of Phishing Attacks

October 10th, 2019 📆 | 3688 Views ⚑

Tagged with: authentication • customer • cybercriminals • leverage • requirement • string • strong