PT-2024-32768

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A null pointer dereference error could occur in the Linux kernel due to a missing null check for the set output gamma function pointer in the dcn30 set output transfer func function. This issue...

PT-2024-30770

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.0-rc3-00131-g66b586715063 533 Description The issue is related to a missing check in the BPF verifier, which can lead to out-of-bounds memory accesses. This occurs when a modified CONST PTR TO DYNPTR is pass...

PT-2024-40795

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been reported. The crash involves the mz zip mem read func and mz zip validate file functions. This issue is related ...

PT-2024-40796

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: ndpi search zoom, check ndpi detection func, and ndpi...

PT-2024-40794

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the involvement of mz zip mem read func, mz zip reader...

CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...

CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...

CVE-2024-27044 drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10setoutputtransferfunc' The 'stream' pointer is used in dcn10setoutputtransferfunc before the check if 'stream' is NULL. Fixes the below:...

PT-2024-31324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the drm/xe/preempt fence component in the Linux kernel, where subtle deadlocks can be introduced in the preempt fence work func due to the use of a single global...

PT-2024-22611

Name of the Vulnerable Software and Affected Versions Symfony 1 versions 1.1.0 through 1.5.18 Description The issue is related to a gadget chain due to dangerous deserialization in the sfNamespacedParameterHolder class, which could enable an attacker to achieve remote code execution if a develope...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the pluginexternfunc method of the TBD module, which may be read out-of-bounds...

PT-2024-21768 · Google · Android

Name of the Vulnerable Software and Affected Versions: TBD affected versions not specified Description: The issue is related to a possible out of bounds read in the plugin extern func due to a missing bounds check. This could lead to local information disclosure with no additional execution...

CVE-2024-22927: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

PT-2024-19617

Name of the Vulnerable Software and Affected Versions eyoucms version 1.6.5 Description A Cross Site Scripting XSS issue exists in the func parameter, allowing a remote attacker to execute arbitrary code via a crafted URL. Recommendations For eyoucms version 1.6.5, consider restricting access to...

PT-2024-8186

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential NULL pointer dereference in the dcn10 set output transfer func function. The stream pointer is used before checking if it is NULL, which could lead ...

PT-2024-40682

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

PT-2023-35622 · Git +1 · Php

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several functions: zend reference destroy, rc dtor func, and ze...

PT-2023-8761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the pvrusb2 module. This vulnerability may allow an attacker to impact the confidentiality,...

UriParser URI_FUNC() Heap Buffer Overflow DoS

The vulnerability of the URIFUNC function in the UriParse.c component of the UriParser parser is related to reading data beyond the allowable buffer size limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

Regular Expression Denial Of Service (ReDoS)

get-func-name is vulnerable to Regular Expression Denial Of Service. The vulnerability is due to the getFuncName function in index.js not properly checking the functionSource size and length. which allows an attacker to trigger a DOS attack by using an input like '\t'.repeat54773 + '\t/function/i...