2974 matches found
CVE-2022-30631 Stack exhaustion when reading certain archives in compress/gzip
Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files...
Twitter data breach affects 5.4M users
Twitter has confirmed that it was breached last month via a now-patched 0-day vulnerability in Twitters systems, allowing an attacker to link email addresses and phone numbers to user accounts. This enabled the attacker to compile a list of 5.4 million Twitter user account profiles. "We want to l...
CVE-2021-33643
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc0 for a variable gnulonglink, causing an out-of-bounds read...
CVE-2021-33643
CVE-2021-33643 is a vulnerability in the libtar library where an attacker submitting a crafted tar file with a header size of 0 can trigger a call to malloc(0) for gnu_longlink, leading to an out-of-bounds read. The issue is documented across multiple connected sources (open-source Linux distribu...
[SECURITY] Fedora 36 Update: popub-0-0.14.20171007git6ffa11c.fc36
Publish a service from localhost onto your server...
[SECURITY] Fedora 36 Update: golang-vbom-util-0-0.12.20190520gitefcd4e0.fc36
Sort orders, comparison functions, and "heavy-weight string" utilities in Go...
[SECURITY] Fedora 36 Update: golang-github-client9-plaintext-0-0.9.20190703git5bf47e7.fc36
Extract human languages in plain UTF-8 text from computer code and markup...
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
The Microsoft Threat Intelligence Center MSTIC and the Microsoft Security Response Center MSRC found a private-sector offensive actor PSOA using multiple Windows and Adobe 0-day exploits, including one for the recently patched CVE-2022-22047, in limited and targeted attacks against European and...
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
The Microsoft Threat Intelligence Center MSTIC and the Microsoft Security Response Center MSRC found a private-sector offensive actor PSOA using multiple Windows and Adobe 0-day exploits, including one for the recently patched CVE-2022-22047, in limited and targeted attacks against European and...
Fedora: Security Advisory for sysutil (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: golang-github-skip2-qrcode-0-2.20220316gitda1b656.fc35
QR Code encoder Go...
[SECURITY] Fedora 35 Update: golang-github-pquerna-ffjson-0-0.9.20200730gitaa0246c.fc35
Ffjson generates static MarshalJSON and UnmarshalJSON functions for structures in Go. The generated functions reduce the reliance upon runtime reflection to do serialization and are generally 2 to 3 times faster. In cases where ffjson doesn't understand a Type involved, it falls back to...
[SECURITY] Fedora 35 Update: golang-github-dustinkirkland-petname-0-0.5.20200605git8e5a1ed.fc35
An RFC1178 implementation...
[SECURITY] Fedora 35 Update: golang-github-crossdock-0-0.8.20190628git049aabb.fc35
A Go client for Crossdock...
User can set auctioneer to address(0) to prevent vault from being liquidated
Lines of code Vulnerability details Impact Vault cannot be liquidated Proof of Concept auction can be called with any address as the 'to' address. A majority of ERC20 tokens will revert if a transfer is initiated to address0, notably, including USDC. Since the auctioneer is paid each time a payme...
[SECURITY] Fedora 36 Update: gotun-0-0.14.gita9dbe4d.fc36
Tool to run tests on OpenStack...
SUSE SLES15 Security Update : apache2 (SUSE-SU-2022:2338-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2338-1 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows a...
[SECURITY] Fedora 36 Update: golang-github-crossdock-0-0.8.20190628git049aabb.fc36
A Go client for Crossdock...
Huawei MindSpore Community numeric error vulnerability
Huawei MindSpore Community is an open source deep learning framework from Huawei China.A numerical error vulnerability exists in versions prior to Huawei MindSpore Community 1.3.0, which stems from the fact that when performing the initialization operation of the Split operator, if a dimension in...
