On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+perms+lang), one can login as any user without a password. Nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled.Īn issue was discovered in phpABook 0.9 Intermediate. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy. PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.įlaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona.Ĭontrollers/page_apply.php in SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume.Īn issue was discovered in Squid before 4.10. Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.

Linksys e4200 setup software download