CVE-2021-46590

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46590

CVE-2021-46590 (Bentley MicroStation CONNECT 10.16.0.80) : A vulnerability exists in the parsing of JT files where crafted data can trigger a read past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (target must open a malicious page or file...

CVE-2021-46588

CVE-2021-46588 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing flaw in JT files that leads to a use-after-free, enabling remote code execution. Exploitation requires user interaction (visit a malicious page or open a malicious file). Multiple connected sources (e.g., ZDI-2...

CVE-2021-46586

Bentley MicroStation CONNECT (affected version 10.16.0.80) is vulnerable due to a flaw in 3DS file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file); ...

CVE-2021-46582

Bentley MicroStation CONNECT (versions including 10.16.0.80) is affected by a JP2 image parsing vulnerability. The flaw arises from not validating the existence of an object before performing operations on it, enabling use-after-free-like behavior that can lead to remote code execution. Exploitat...

CVE-2021-46581

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46580

CVE-2021-46580 affects Bentley MicroStation CONNECT. The issue is a JT file parsing use-after-free caused by not validating an object’s existence before operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...

CVE-2021-46578

Bentley MicroStation CONNECT JT file parsing vulnerability (CVE-2021-46578) is a use-after-free flaw that allows remote code execution. The issue arises in parsing JT files and stems from not validating the existence of an object before performing operations on it. Exploitation requires user inte...

CVE-2021-46578

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46576

Bentley MicroStation CONNECT 10.16.0.80 is affected. The vulnerability lies in JT file parsing, where crafted JT data can trigger a write past the end of an allocated buffer, allowing remote code execution in the context of the current process. User interaction is required (the target must visit ...

CVE-2021-46574

Bentley MicroStation CONNECT 10.16.0.80 is affected by a JT file parsing flaw that can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious JT file). The issue is disclosed in ...

CVE-2021-46567

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46566

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46564

CVE-2021-46564 affects Bentley MicroStation CONNECT 10.16.0.80. The flaw is in JT file parsing, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a mali...

Linux/MIPS - N32 MSB Reverse Shell Shellcode

/ mipsn32msblinuxrevsh.c - MIPS N32 MSB Linux reverse Copyright c 2022 Marco Ivaldi Basic MIPS N32 MSB Linux reverse shellcode, showcasing various techniques to avoid badchars. Cross-compile https://buildroot.org/ with: $ mips64-linux-gcc -static mipsn32msblinuxrevsh.c -o revsh Tested on Linux...

Pexip Infinity 信任管理问题漏洞

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. The product provides high quality and secure cloud conferencing capabilities.A security vulnerability exists in versions of Pexip Infinity...

The vulnerability of the CONNECT function implementation in the MariaDB database management system allows a hacker to execute arbitrary code.

The vulnerability of the CONNECT function implementation in the MariaDB database management system is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Jenkins dbCharts Plugin Access Control Error Vulnerability

Jenkins plug-ins are plug-ins that provide appropriate functionality for Jenkins. Jenkins dbCharts Plugin Access Control Error Vulnerability. An attacker can exploit this vulnerability to connect to a specified database using JDBC with specified credentials...

Security Bulletin: IBM App Connect for Healthcare is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2022-23307)

Summary A vulnerability in Apache Log4j CVE-2022-23307 impacts the logging infrastructure in the ATNAAudit node and the XDSConsumer pattern in IBM App Connect for Healthcare. The fix includes Apache Log4j 2.17.1. Vulnerability Details CVEID: CVE-2022-23307 DESCRIPTION: Apache Log4j could allow a...

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...