18415 matches found
CVE-2021-32994 Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer
Softing OPC UA C++ SDK Software Development Kit versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locatio...
Heap buffer overflow in libr/bin/format/mach0/mach0.c
This vulnerability is of type heap-buffer-overflow. And after quick investigation I think it is very likely to be successfully exploited to remote code execution. The bug exists in latest stable release radare2-5.6.6 and lastest master branch 8317a34b7e4ab731e230dcdd81adc9323c5b518b, updated in...
CobaltBus - Cobalt Strike External C2 Integration With Azure Servicebus, C2 Traffic Via Azure Servicebus
Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus Setup 1. Create an Azure Service Bus 2. Create a Shared access policy Connection string that can only Send and Listen 3. Edit the static connectionString variable in Beacon C projects to match the "Primar...
PT-2022-2691
Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2 through 1.0.2zd OpenSSL versions 1.1.1 through 1.1.1n OpenSSL versions 3.0.0 through 3.0.2 Description The c rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is...
The vulnerability of the bezier_spline function in the genepic.c utility for converting .fig files (Fig2dev), which allows a hacker to cause a service failure.
The vulnerability of the bezierspline function in the genepic.c utility for converting .fig files in Fig2dev is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the sunrpc module in the system library glibc, related to the execution of operations outside the buffer boundaries in memory, allows an attacker to execute arbitrary code.
The vulnerability of the sunrpc module in the system library glibc relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data to the application...
The vulnerability of the getcwd() function in the system library glibc, which allows a hacker to execute arbitrary code
The vulnerability of the getcwd function in the glibc system library is related to a single-bit offset error. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted application data remotely...
The vulnerability of the sunrpc module in the system library glibc allows a hacker to execute arbitrary code.
The vulnerability of the sunrpc module in the system library glibc is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data to the application...
FORCEDENTRY: Sandbox Escape
Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen Lab for sharing a sample of the FORCEDENTRY exploit with us, and Apple’s Security Engineering and Architecture SEAR group for collaborating with us on the technical analysis. Any editorial opinions reflected below ar...
The vulnerability of the realpath() function in the glibc system library, which allows a hacker to access confidential information
The vulnerability of the realpath function in the glibc system library is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...
SRC-2023-0002 : PTC Thingworx Edge C-SDK mulitpartMessageStoreEntry_Create Array Indexing Out-of-Bounds Write Remote Code Execution Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of PTC Thingworx Edge C-SDK. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mulitpartMessageStoreEntryCreate function. An...
SRC-2023-0001 : PTC Thingworx Edge C-SDK twHeader_fromStream Integer Overflow Remote Code Execution Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of PTC Thingworx Edge C-SDK. Authentication is not required to exploit this vulnerability. The specific flaw exists within the twHeaderfromStream function. An integer wrap occurs...
'Purple Fox' Hackers Spotted Using New Variant of FatalRAT in Recent Malware Attacks
The operators of the Purple Fox malware have retooled their malware arsenal with a new variant of a remote access trojan called FatalRAT, while also simultaneously upgrading their evasion mechanisms to bypass security software. "Users' machines are targeted via trojanized software packages...
Fedora: Security Advisory for osgearth (FEDORA-2022-6746739d52)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for eigen3 (FEDORA-2022-6746739d52)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for python-ujson (FEDORA-2022-dbf6e00ba8)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: python-ujson-5.1.0-1.fc36
UltraJSON is an ultra fast JSON encoder and decoder written in pure C with bindings for Python...
[SECURITY] Fedora 36 Update: shapelib-1.5.0-12.fc36
The Shapefile C Library provides the ability to write simple C programs for reading, writing and updating to a limited extent ESRI Shapefiles, and the associated attribute file .dbf...
[SECURITY] Fedora 36 Update: podofo-0.9.7-7.fc36
PoDoFo is a library to work with the PDF file format. The name comes from the first letter of PDF Portable Document Format. A few tools to work with PDF files are already included in the PoDoFo package. The PoDoFo library is a free, portable C++ library which includes classes to parse PDF files a...