Renren
Monthly
SQL injection in renren-security before v5.5.0 in BaseServiceImpl.java. PoC available.
Heap-based buffer overflow in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via a crafted image in a chat message, as demonstrated using a PNG file. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading to a heap-based buffer overflow, as demonstrated using a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
SQL injection in renren-security before v5.5.0 in BaseServiceImpl.java. PoC available.
Heap-based buffer overflow in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via a crafted image in a chat message, as demonstrated using a PNG file. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading to a heap-based buffer overflow, as demonstrated using a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.