>> CATEGORY: exploit

i-doit version 1.15.2 suffers from a cross site scripting vulnerability.

An off-by-one error in ngx_resolver_copy() while processing DNS responses allows a network attacker to write a dot character (‘.’, 0x2E) out of bounds in a heap allocated buffer. The vulnerability…

An off-by-one error in ngx_resolver_copy() while processing DNS responses allows a network attacker to write a dot character (‘.’, 0x2E) out of bounds in a heap allocated buffer. The vulnerability…

Gadget Works Online Ordering System version 1.0 suffers from a persistent cross site scripting vulnerability.

WordPress Cookie Law Bar plugin version 1.2.1 suffers from a persistent cross site scripting vulnerability.

The QImageReader class can read out-of-bounds when converting a specially-crafted TIFF file into a QImage, where the TIFF tile length is inconsistent with the tile size. This could potentially allow…

The QImageReader class can read out-of-bounds when converting a specially-crafted TIFF file into a QImage, where the TIFF tile length is inconsistent with the tile size. This could potentially allow…

Backdoor.Win32.Singu.a malware suffers from a buffer overflow vulnerability.

Backdoor.Win32.SkyDance.216 malware suffers from a buffer overflow vulnerability.

DiskBoss Service version 12.2.18 suffers from an unquoted service path vulnerability.