mayur021
| 名称 | mayur021 |
|---|---|
| 注册 | 2022-05-10 |
| 社区积分 | 55 |
| 提交 | 16 |
| 提交 | 1 |
| 帖子 | 3 |
| 点赞 | 0 |
| 排名 | 高级 |
| Activity Badges | 👴 Long-time User (4x) 🐘 Heavy User 🖖 Community Member 📝 Editor |
提交 (1)
提交 (16)
| 标识符 | 条目 | CVE | 已更新 | 管理 | 更 | 积 |
|---|---|---|---|---|---|---|
| 27824326-42 | davenardella snap7 s7_micro_client.cpp opUpload 内存损坏 | CVE-2026-90572 | 2026-09-12 | 2026-09-12 | 16 | 20 |
帖子 (3)
时间轴 (3)
| 日期 | 条目 | CVE | 评论 | V | 状态 |
|---|---|---|---|---|---|
| 2026-09-14 | 403157 | CVE-2026-90572 | Correction to my own last line. Not all the earlier snap7 findings are server-side: CVE-2026-16225 is TSnap7Peer::NegotiatePDULength, and issue 17 in the same tracker is explicitly client-side, in opWriteArea. What actually distinguishes this path is that … | 0 | 已接受 |
| 2026-09-13 | 403157 | CVE-2026-90572 | Finder here. One clarification on the direction of this issue, since the write-up can be read the wrong way round. TSnap7MicroClient::opUpload is client-side only. It is defined at s7_micro_client.cpp:997 and reached only from the client's own job dis… | 1 | 已接受 |
| 2026-08-01 | 376946 | CVE-2026-15105 | On the mechanism behind this entry, verified against 1.4.3 at commit 30f37da. The entry classifies this as deserialization (CWE-502), and the summary reads "the manipulation with an unknown input leads to a deserialization vulnerability". Nothing on thi… | 0 | 已接受 |