Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2023-29748

EPSS 0.23% · P46
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-29748

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sara Tech Story Saver 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sara Tech Story Saver是美国Sara Tech公司的一个下载程序。轻松下载照片或视频故事到 Instagram。 Sara Tech Story Saver 1.0.6版本存在安全漏洞,该漏洞源于攻击者可以将大量数据注入任何文件,这些文件将在应用程序打开时加载到内存中,当攻击者注入过多数据时,应用程序将触发OOM错误并在启动时崩溃,从而导致持续拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2023-29748

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-29748

登录查看更多情报信息。

Same Patch Batch · n/a · 2023-06-01 · 27 CVEs total

CVE-2014-1251046.3 MEDIUMVaultPress Plugin MailPoet Plugin class.vaultpress-hotfixes.php protect_aioseo_ajax unrest
CVE-2015-101094.3 MEDIUMVideo Playlist and Gallery Plugin wp-media-cincopa.php cross-site request forgery
CVE-2023-28147ARM Mali GPU Kernel Driver 安全漏洞
CVE-2023-33754Inpiazza Cloud WiFi 安全漏洞
CVE-2023-33764simpleRedak 跨站脚本漏洞
CVE-2023-27639PrestaShop 路径遍历漏洞
CVE-2023-27640PrestaShop 路径遍历漏洞
CVE-2023-29722Glitter Unicorn Wallpaper 安全漏洞
CVE-2023-29723Glitter Unicorn Wallpaper 安全漏洞
CVE-2023-29736Timmystudios Fast Typing Keyboard 路径遍历漏洞
CVE-2023-33551Linux kernel 缓冲区错误漏洞
CVE-2023-33552Linux kernel 缓冲区错误漏洞
CVE-2023-33544Hawt Hawtio 路径遍历漏洞
CVE-2023-33546Janino 缓冲区错误漏洞
CVE-2023-23952Broadcom Advanced Secure Gateway 命令注入漏洞
CVE-2023-23953Broadcom Advanced Secure Gateway 安全漏洞
CVE-2023-23954Broadcom Advanced Secure Gateway 跨站脚本漏洞
CVE-2023-23955Broadcom Advanced Secure Gateway 代码问题漏洞
CVE-2023-2598Linux kernel 缓冲区错误漏洞
CVE-2023-2977OpenSC 缓冲区错误漏洞

Showing top 20 of 27 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2023-29748

No comments yet


Leave a comment