POJIA破甲
地图 / Null byte Injection in https://████/

Null byte Injection in https://████/

内存破坏 / Improper Null Termination / #709072

厂商
U.S. Dept Of Defense
严重程度
中危
赏金
—
弱点
Improper Null Termination
研究员
@mohammedadam24
披露日期
2020-05-14
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(776 字符中的一小部分)
Description: Microsoft .NET Framework is prone to multiple NULL-byte injection vulnerabilities because it fails to adequately sanitize user-supplied data.

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 U.S. Dept Of Defense 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @mohammedadam24 · 版权归作者与 U.S. Dept Of Defense 所有

同类报告

HackerOne SAML signup domain enforcement bypass results in unauthorized access to HackerOne PullRequest organizationHackerOne · 2024-02-04Unauthenticated user can upload an attachment to the last updated report draftHackerOne · 2018-10-09Improper input validation On Exported deep-link handler crashes `FileDisplayActivity` on crafted external URL — Denial-of-ServiceNextcloud · 2026-05-01mbedTLS private-key blob null-termination asymmetry in lib/vtls/mbedtls.c (mbed_load_privkey)curl · 2026-05-07Cache poisoning using NULL bytes and long URLsGreenhouse.io · 2018-09-16Improper handling of untypical characters in domain namesNode.js · 2021-09-10