PT-2021-10243

Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: The issue is related to a segmentation fault in the vc1 decode b mb intfr function in vc1 block.c, which can be triggered by an attacker using a crafted file, resulting in a denial-of-service. Recommendations:...

Realtek Jungle SDK 安全漏洞

The Realtek Jungle SDK from China's Realtek Semiconductor Realtek provides an HTTP web server that exposes a management interface that can be used to configure access points. A security vulnerability exists in the Realtek Jungle SDK, which stems from a failure of the product's configuration...

CVE-2021-38545: Undefined Security Weakness

Raspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We...

PT-2021-22200

Name of the Vulnerable Software and Affected Versions Raspberry Pi 3 B+ and 4 B devices through 2021-08-09 Description The issue allows remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, in certain specific use cases where the devi...

Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.

Summary Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID: CVE-2021-3449 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference in signaturealgorithms processing. By...

GSD-2021-1001287 dm btree remove: assign new_root only when removal succeeds

dm btree remove: assign newroot only when removal succeeds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.51 by commit...

Booking Core has an unspecified vulnerability

Booking Core is an application. A Laravel-based booking system designed for travel websites, malls, travel agents, tour operators, B&Bs, villa rentals, resort rentals, Make Travel websites.Booking Core has a security vulnerability that stems from the subscription functionality in Ultimate Booking...

Booking Core Cross-Site Scripting Vulnerability

Booking Core is an application. A Laravel-based booking system designed for travel websites, malls, travel agents, tour operators, B&Bs, villa rentals, resort rentals, Make Travel websites.Booking Core suffers from a cross-site scripting vulnerability, which stems from a cross-site scripting XSS...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::enable_if<true, apfs_omap_key const*>::type APFSBtreeNode<apfs_omap_ke

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5785312956645376 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-use-after-free in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSJObjBtreeNode>::

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5594044976726016 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4864418583281664 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cras...

CVE-2021-20738

WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors...

CVE-2021-20738

CVE-2021-20738 affects Elecom WRC-1167FS-W, WRC-1167FS-B and WRC-1167FSA. An unauthenticated, network-adjacent attacker can obtain sensitive information via unspecified vectors. The connected documents do not specify technical root cause or fixed versions. A mitigation noted for these devices is ...

CVE-2021-20738: Undefined Security Weakness

WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors...

PT-2021-14194

Name of the Vulnerable Software and Affected Versions: WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions Description: The issue allows an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors. Recommendations: At the moment, there is no informati...

ELECOM 多款产品安全漏洞

The Elecom ELECOM WRC and ELECOM WRH are both home-ready network cameras from Elecom Japan. A security vulnerability exists in multiple ELECOM products, which can be exploited by unauthenticated network neighbor attackers to obtain sensitive information via unspecified vectors. The following...

in bigprof-software/online-rental-property-manager

💥 BUG privilege escalation bug to add employmentandincomehistory to a applicant . 💥 IMPACT unprivileged user can add employmentandincomehistory to a applicant 💥 STEP TO REPRODUCE 1. From admin account goto http://localhost/online-rental/app/admin/pageViewMembers.php and add new user called user-B...

Improper Privilege Management in bigprof-software/online-rental-property-manager

💥 BUG privilege escalation bug to add residenceandrental to a applicant . 💥 IMPACT unprivileged user can add residenceandrental to a applicant 💥 STEP TO REPRODUCE 1. From admin account goto http://localhost/online-rental/app/admin/pageViewMembers.php and add new user called user-B .\ Now revoke...

Cross-site Scripting (XSS) - Stored in bigprof-software/online-invoicing-system

💥 BUG Stored xss via client address in invoice 💥 TESTED VERSION latest version as of 01/07/21 💥 STEP TO REPRODUCE 1. From admin account goto http://localhost/online-invoice2/app/admin/pageViewMembers.php and add a new user called user-B with read-write permission in invoice/client module .\ 2...

Unauthorized access vulnerability in the interlib library cluster management system (CNVD-2021-49125)

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. The...