34 matches found
CVE-2023-21675
CVE-2023-21675 is described in the connected documents as a Windows kernel vulnerability rooted in hive/registry memory corruption. The attack targets HKCU (volatile/hive storage) using out-of-bounds cell indexes to access the _CMHIVE/_HHIVE structures from kernel pool, enabling arbitrary read/wr...
CVE-2022-21675
creationtimestamp| type| source ---|---|--- 2022-01-12 22:17:26+00:00| seen| https://t.me/cibsecurity/35361...
CVE-2022-21675 Bytecode Viewer v2.10.x Zip Slip
Bytecode Viewer BCV is a Java/Android reverse engineering suite. Versions of the package prior to 2.11.0 are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". The vulnerability is exploited using a specially crafted archive that holds directory traversal filenames e.g...
CVE-2022-21675
BCV (Bytecode Viewer) versions prior to 2.11.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip). A crafted archive with directory traversal filenames (e.g., ../../evil.exe) can overwrite files across formats such as zip, jar, tar, war, cpio, apk, rar, 7z, enabling file ove...
CVE-2022-21675 Bytecode Viewer v2.10.x Zip Slip
Bytecode Viewer BCV is a Java/Android reverse engineering suite. Versions of the package prior to 2.11.0 are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". The vulnerability is exploited using a specially crafted archive that holds directory traversal filenames e.g...
[SECURITY] [DLA 2778-1] fig2dev security update
Debian LTS Advisory DLA-2778-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 04, 2021 https://wiki.debian.org/LTS Package : fig2dev Version : 1:3.2.6a-2+deb9u4 CVE ID : CVE-2019-19797 CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-21532...
CVE-2020-21675
creationtimestamp| type| source ---|---|--- 2021-08-11 00:37:51+00:00| seen| https://t.me/cibsecurity/27109...
CVE-2020-21675
A stack-based buffer overflow in the genptktext component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into ptk format...
UBUNTU-CVE-2020-21675
A stack-based buffer overflow in the genptktext component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into ptk format...
CVE-2020-21675
CVE-2020-21675 affects fig2dev 3.2.7b, caused by a stack-based buffer overflow in the genptk_text component (genptk.c), which can lead to denial of service when converting XFig to ptk. Affected product: fig2dev (Xfig suite). Root cause: stack overflow in genptk_text. Impact: DoS via crafted input...
CVE-2021-21675
creationtimestamp| type| source ---|---|--- 2021-06-30 20:30:12+00:00| seen| https://t.me/cibsecurity/25831...
CVE-2021-21675
A cross-site request forgery CSRF vulnerability in Jenkins requests-plugin Plugin 2.2.12 and earlier allows attackers to create requests and/or have administrators apply pending requests...
CVE-2021-21675
Summary: CVE-2021-21675 is a CSRF vulnerability in Jenkins’ requests-plugin that affects versions 2.2.12 and earlier. The flaw arises because certain HTTP endpoints did not require POST, allowing attackers to craft requests or cause administrators to apply pending requests (e.g., renaming or dele...