Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-10003 State: PUBLISHED Published: 2023-02-07T21:00:04.107Z Last Updated: 2025-03-25T15:44:24.444Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: XpressEngine Problem Types: CWE-89 Description: A vulnerability was found in XpressEngine up to 1.4.4. It has been rated as critical. This issue affects some unknown processing of the component Update Query Handler. The manipulation leads to sql injection. Upgrading to version 1.4.5 is able to address this issue. The patch is named c6e94449f21256d6362450b29c7847305e756ad5. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-22024
56ad5. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220247. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220247 - https://vuldb.com/?ctiid.220247 - https://github.com/haegyung/xe-core/commit/c6e94449f21256d6362450b29c7847305e756ad5
CVE ID: CVE-2011-10004 State: PUBLISHED Published: 2023-10-16T23:31:04.095Z Last Updated: 2024-09-16T15:37:22.858Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: reciply Plugin Problem Types: CWE-434 Description: A vulnerability was found in reciply Plugin up to 1.1.7 on WordPress. It has been rated as critical. This issue affects some unknown processing of the file uploadImage.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. Upgrading to version 1.1.8 is able to address this issue. The identifier of the patch is e3ff616dc08d3aadff9253f1085e13f677d0c676. It is recommended to upgrade the affected component. The identifier VD
atch is e3ff616dc08d3aadff9253f1085e13f677d0c676. It is recommended to upgrade the affected component. The identifier VDB-242189 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.242189 - https://vuldb.com/?ctiid.242189 - https://github.com/wp-plugins/reciply/commit/e3ff616dc08d3aadff9253f1085e13f677d0c676
CVE ID: CVE-2011-10005 State: PUBLISHED Published: 2024-01-16T08:00:05.823Z Last Updated: 2025-06-02T15:11:59.735Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: EasyFTP Problem Types: CWE-120 Description: A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250716. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
250716. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250716 - https://vuldb.com/?ctiid.250716 - https://www.exploit-db.com/exploits/17354
CVE ID: CVE-2011-10006 State: PUBLISHED Published: 2024-04-08T13:00:05.786Z Last Updated: 2024-08-07T00:30:46.944Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: GamerZ Products: WP-PostRatings Problem Types: CWE-79 Description: A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.65 is able to address this issue. The identifier of the patch is 6182a5682b12369ced0becd3b505439ce2eb8132. It is recommended to upgrade the affected component. The identifier VD
atch is 6182a5682b12369ced0becd3b505439ce2eb8132. It is recommended to upgrade the affected component. The identifier VDB-259629 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259629 - https://vuldb.com/?ctiid.259629 - https://github.com/wp-plugins/wp-postratings/commit/dcc68d03693152eba14d6fb33ba42528ff60e06a - https://github.com/wp-plugins/wp-postratings/commit/6182a5682b12369ced0becd3b505439ce2eb8132 - https://github.com/wp-plugins/wp-postratings/releases/tag/1.65
CVE ID: CVE-2011-10007 State: PUBLISHED Published: 2025-06-05T11:57:58.654Z Last Updated: 2025-06-11T12:27:11.870Z Vendors: RCLAMP Products: File::Find::Rule Problem Types: CWE-78 Description: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed. Example: $ mkdir /tmp/poc; echo > "/tmp/poc/|id" $ perl -MFile::Find::Rule \ -E 'File::Find::Rule->grep("foo")->in("/tmp/poc")' uid=1000(user) gid=1000(user) groups=1000(user),100(user
Find::Rule \ -E 'File::Find::Rule->grep("foo")->in("/tmp/poc")' uid=1000(user) gid=1000(user) groups=1000(user),100(users) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://metacpan.org/release/RCLAMP/File-Find-Rule-0.34/source/lib/File/Find/Rule.pm#L423 - https://rt.cpan.org/Public/Bug/Display.html?id=64504 - https://github.com/richardc/perl-file-find-rule/pull/4 - https://github.com/richardc/perl-file-find-rule/commit/df58128bcee4c1da78c34d7f3fe1357e575ad56f.patch
CVE ID: CVE-2011-10008 State: PUBLISHED Published: 2025-07-31T14:58:28.548Z Last Updated: 2025-11-20T21:22:52.721Z Vendors: MPlayer Project Products: MPlayer Lite Problem Types: CWE-121, CWE-20 Description: A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that triggers a stack overflow when processed by the player, particularly via drag-and-drop interaction. This flaw allows for control of the execution flow through SEH overwrite and a DEP bypass using a ROP chain that leverages known gadgets
for control of the execution flow through SEH overwrite and a DEP bypass using a ROP chain that leverages known gadgets in loaded DLLs. Successful exploitation may result in arbitrary code execution with the privileges of the current user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mplayer_m3u_bof.rb - https://www.exploit-db.com/exploits/17013 - https://www.vulncheck.com/advisories/mplayer-lite-r33064-m3u-stack-based-buffer-overflow
CVE ID: CVE-2011-10009 State: PUBLISHED Published: 2025-08-13T20:52:51.612Z Last Updated: 2025-08-14T14:52:12.204Z Vendors: S40 CMS Products: S40 CMS Problem Types: CWE-22 Description: S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary files outside the web root. This can be exploited remotely without authentication by appending traversal sequences and a null byte to bypass file extension checks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/sc
DP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/s40_traversal.rb - https://www.exploit-db.com/exploits/17129 - https://web.archive.org/web/20110613222630/http://y-osirys.com/security/exploits/id27 - https://web.archive.org/web/20120531114058/http://s40.biz/ - https://www.vulncheck.com/advisories/s40-cms-path-traversal
CVE ID: CVE-2011-10010 State: PUBLISHED Published: 2025-08-13T20:51:41.298Z Last Updated: 2025-08-14T14:52:32.224Z Vendors: QuickShareHQ Products: QuickShare File Server Problem Types: CWE-22 Description: QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths. Authenticated users can exploit this flaw by submitting crafted sequences to access or write files outside the intended virtual directory. When the "Writable" option is enabled (default during account creation), this allows attackers to upload arbitrary files to privileged locations such as system32, enabling remote code execution via MOF injection
rs to upload arbitrary files to privileged locations such as system32, enabling remote code execution via MOF injection or executable placement. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/quickshare_traversal_write.rb - https://www.exploit-db.com/exploits/16105 - https://www.exploit-db.com/exploits/18933 - https://web.archive.org/web/20110814125645/http://www.digital-echidna.org/2011/02/quickshare-file-share-1-2-1-directory-traversal-vulnerability/ - https://web.archive.org/web/20120125101026/http://www.quicksharehq.com/blog/quickshare-file-server-1-2-2-released.html - http
://web.archive.org/web/20120125101026/http://www.quicksharehq.com/blog/quickshare-file-server-1-2-2-released.html - https://www.vulncheck.com/advisories/quickshare-file-server-path-traversal-rce
CVE ID: CVE-2011-10011 State: PUBLISHED Published: 2025-08-13T20:55:07.652Z Last Updated: 2025-11-20T02:01:09.630Z Vendors: WeBid Products: WeBid Problem Types: CWE-94 Description: WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into includes/currencies.php. This allows unauthenticated attackers to inject arbitrary PHP code, resulting in persistent remote code execution when the modified script is accessed or included by the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/mo
st Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/webid_converter.rb - https://www.exploit-db.com/exploits/17487 - https://www.exploit-db.com/exploits/18934 - https://web.archive.org/web/20121024110058/http://www.webidsupport.com/forums/showthread.php?3892 - https://sourceforge.net/projects/simpleauction/ - https://www.vulncheck.com/advisories/webid-remote-php-code-injection
CVE ID: CVE-2011-10012 State: PUBLISHED Published: 2025-08-13T20:35:59.386Z Last Updated: 2025-11-20T02:01:09.862Z Vendors: NetOp Products: Remote Control Client Problem Types: CWE-121 Description: NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .dws file contains a string longer than 520 bytes, the application fails to perform proper bounds checking, allowing an attacker to execute arbitrary code when the file is opened. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/filefo
ment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/netop.rb - https://www.exploit-db.com/exploits/17223 - https://www.exploit-db.com/exploits/18697 - https://www.fortiguard.com/encyclopedia/ips/27765/netop-remote-control-dws-file-handling-buffer-overflow - https://netop.com/ - https://web.archive.org/web/20120314075913/https://codework-systems.com/netop-remotecontrol-10-01-released/ - https://www.vulncheck.com/advisories/netop-remote-control-client-dws-file-buffer-overflow
CVE ID: CVE-2011-10013 State: PUBLISHED Published: 2025-08-13T20:54:16.949Z Last Updated: 2025-11-22T13:14:30.725Z Vendors: Traq Project Products: Issue Tracking System Problem Types: CWE-94, CWE-306 Description: Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script. The flawed authorization logic fails to halt execution after a failed access check, allowing unauthenticated users to reach admin-only functionality. This can be exploited via plugins.php to inject and execute arbitrary PHP code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/explo
CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/traq_plugin_exec.rb - https://www.exploit-db.com/exploits/18213 - https://www.exploit-db.com/exploits/18239 - https://web.archive.org/web/20110729003039/https://traqproject.org/ - https://github.com/nirix/traq/releases/tag/v2.3.1 - https://www.vulncheck.com/advisories/traq-issue-tracking-system-rce
CVE ID: CVE-2011-10014 State: PUBLISHED Published: 2025-08-13T20:34:41.077Z Last Updated: 2025-08-14T14:12:17.218Z Vendors: SA-MP Team Products: San Andreas Multiplayer Problem Types: CWE-121 Description: GTA San Andreas Multiplayer (SA-MP) server version 0.3.1.1 is vulnerable to a stack-based buffer overflow triggered by parsing a malformed server.cfg configuration file. The vulnerability allows local attackers to execute arbitrary code when the server binary (samp-server.exe) processes a crafted echo directive containing excessive input. The original 'sa-mp.com' site is defunct, but the community maintains mirrors and forks that may be vulnerable. Additional Analyst Notes: - CISA ADP Vulnr
efunct, but the community maintains mirrors and forks that may be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/gta_samp.rb - https://www.exploit-db.com/exploits/17893 - https://www.exploit-db.com/exploits/18038 - https://www.vulncheck.com/advisories/gta-sa-mp-buffer-overflow
CVE ID: CVE-2011-10015 State: PUBLISHED Published: 2025-08-13T20:33:27.825Z Last Updated: 2025-08-14T14:31:50.708Z Vendors: Cytel Inc. Products: Studio Problem Types: CWE-121 Description: Cytel Studio version 9.0 and earlier is vulnerable to a stack-based buffer overflow triggered by parsing a malformed .CY3 file. The vulnerability occurs when the application copies user-controlled strings into a fixed-size stack buffer (256 bytes) without proper bounds checking. Exploitation allows arbitrary code execution when the crafted file is opened. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/win
DP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/cytel_studio_cy3.rb - https://www.exploit-db.com/exploits/17930 - https://www.exploit-db.com/exploits/18027 - http://aluigi.altervista.org/adv/cytel_1-adv.txt - https://web.archive.org/web/20110708215826/http://www.cytel.com/Software/LogXact.aspx - https://web.archive.org/web/20110708215830/http://www.cytel.com/Software/StatXact.aspx - https://web.archive.org/web/20110301000000*/http://www.cytel.com/Software/StatXact.aspx - https://www.vulncheck.com/advisories/cytel-studio-cy3-file-stack-buffer-overflow
CVE ID: CVE-2011-10016 State: PUBLISHED Published: 2025-08-13T20:52:29.328Z Last Updated: 2025-08-14T14:52:18.163Z Vendors: RealNetworks Inc. Products: Netzip Classic Problem Types: CWE-121 Description: Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation allows arbitrary code execution under the context of the victim user when the ZIP file is opened. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7
ile is opened. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/real_networks_netzip_bof.rb - https://www.exploit-db.com/exploits/16083 - https://www.exploit-db.com/exploits/17985 - https://www.softpedia.com/get/Compression-tools/NetZip-Classic.shtml - https://www.vulncheck.com/advisories/real-networks-netzip-classic-file-parsing-buffer-overflow
CVE ID: CVE-2011-10017 State: PUBLISHED Published: 2025-08-13T20:53:12.545Z Last Updated: 2025-08-14T13:31:39.178Z Vendors: Symmetrix Technologies Products: Snort Report Problem Types: CWE-78 Description: Snort Report versions < 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no authentication and can result in full compromise of the underlying system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/mast
Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/snortreport_exec.rb - https://www.exploit-db.com/exploits/17947 - https://web.archive.org/web/20111003093911/http://www.symmetrixtech.com/articles/news-016.html - https://www.vulncheck.com/advisories/snort-report-rce
CVE ID: CVE-2011-10018 State: PUBLISHED Published: 2025-08-13T20:35:31.755Z Last Updated: 2025-11-20T02:01:10.051Z Vendors: myBB Group Products: Forum Software Problem Types: CWE-912, CWE-94 Description: myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execute arbitrary PHP code by injecting payloads into a specially crafted collapsed cookie. This vulnerability was introduced during packaging and was not part of the intended application logic. Exploitation requires no authentication and results in full compromise of the web server under the context of the web application. Additional Analyst Notes: - CISA AD
sults in full compromise of the web server under the context of the web application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/mybb_backdoor.rb - https://www.exploit-db.com/exploits/17949 - https://web.archive.org/web/20111015224948/http://secunia.com/advisories/46300/ - https://blog.mybb.com/2011/10/06/1-6-4-security-vulnerabilit/ - https://www.vulncheck.com/advisories/mybb-backdoor-arbitrary-command-execution
CVE ID: CVE-2011-10019 State: PUBLISHED Published: 2025-08-13T20:53:33.577Z Last Updated: 2025-11-20T02:01:10.285Z Vendors: Spreecommerce Products: Spreecommerce Problem Types: CWE-94, CWE-1321 Description: Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the search[send][] parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute arbitrary shell commands on the server without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/
lyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/spree_search_exec.rb - https://www.exploit-db.com/exploits/17941 - https://web.archive.org/web/20111009192436/http://spreecommerce.com/blog/2011/10/05/remote-command-product-group/ - https://www.vulncheck.com/advisories/spreecommerce-search-parameter-rce - https://github.com/orgs/spree
CVE ID: CVE-2011-10020 State: PUBLISHED Published: 2025-08-20T15:35:41.803Z Last Updated: 2025-08-22T16:21:17.838Z Vendors: Kaillera Project Products: Server Problem Types: CWE-20 Description: Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake. Once a client sends a valid HELLO0.83 packet and receives a response, any subsequent malformed packet causes the server to crash and become unresponsive. This flaw stems from improper input validation in the server’s UDP packet handler, allowing unauthenticated remote attackers to disrupt service availability. Additional Analyst Notes: - CISA ADP Vulnrichm
llowing unauthenticated remote attackers to disrupt service availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/dos/windows/games/kaillera.rb - https://www.exploit-db.com/exploits/17460 - http://kaillera.com/ - https://www.vulncheck.com/advisories/kaillera-server-dos-via-malformed-udp-packet
CVE ID: CVE-2011-10021 State: PUBLISHED Published: 2025-08-20T15:36:31.991Z Last Updated: 2025-08-22T16:18:34.859Z Vendors: MAGIX Software GmbH Products: Magix Musik Maker Problem Types: CWE-121 Description: Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files. The vulnerability arises from an unsafe strcpy() operation that fails to validate input length, allowing attackers to overwrite the Structured Exception Handler (SEH). By crafting a malicious .mmm file, an attacker can trigger the overflow when the file is opened, potentially leading to arbitrary code execution. This vulnerability was remediated in version 17. Additiona
e is opened, potentially leading to arbitrary code execution. This vulnerability was remediated in version 17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/magix_musikmaker_16_mmm.rb - https://www.exploit-db.com/exploits/17329 - https://www.exploit-db.com/exploits/17313 - https://www.magix.com/us/music-editing/music-maker/ - https://www.darkreading.com/vulnerabilities-threats/another-researcher-hit-with-threat-of-german-anti-hacking-law - https://web.archive.org/web/20110503060356/https://www.corelan.be/index.php/forum/security-advisories/corelan-11-002-magix-music-mak
archive.org/web/20110503060356/https://www.corelan.be/index.php/forum/security-advisories/corelan-11-002-magix-music-maker-16-stack-buffer-overflow/ - https://www.vulncheck.com/advisories/magix-musik-maker-stack-based-buffer-overflow
CVE ID: CVE-2011-10022 State: PUBLISHED Published: 2025-08-20T15:41:03.034Z Last Updated: 2025-08-20T18:47:50.685Z Vendors: SPlayer Project Products: SPlayer Problem Types: CWE-120 Description: SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header. The vulnerability occurs due to improper bounds checking on the header value, allowing an attacker to overwrite the Structured Exception Handler (SEH) and execute arbitrary code. Exploitation requires the victim to open a media file that triggers an HTTP request to a malicious server, which responds with a crafted Content-Type header. Additional A
ile that triggers an HTTP request to a malicious server, which responds with a crafted Content-Type header. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/splayer_content_type.rb - https://www.exploit-db.com/exploits/17243 - https://www.exploit-db.com/exploits/17268 - https://www.splayer.org/ - https://www.vulncheck.com/advisories/splayer-content-type-header-buffer-overflow