5 matches found
CVE-2026-52860
Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec as part of populating the completion dictionary. Python evaluates function default values, parameter...
It was discovered that when exec'ing from a non-leader thread armed POSIX CPU timers would be left on a list but freed leading to a use-after-free.
...
AZL-33498 CVE-2022-2585 affecting package kernel for versions less than 5.15.153.1-1
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...
PT-2021-18589
Name of the Vulnerable Software and Affected Versions Knowage Suite versions prior to 7.4 Description The issue allows an attacker to inject arbitrary web script in "/restful-services/publish" via the EXEC FROM parameter, which can lead to data leakage. This is a case of reflected cross-site...
MacOS X EvoCam HTTP GET Buffer Overflow
This module exploits a stack buffer overflow in the web server provided with the EvoCam program for Mac OS X. We use Dino Dai Zovi's exec-from-heap technique to copy the payload from the non-executable stack segment to heap memory. Vulnerable versions include 3.6.6, 3.6.7, and possibly earlier...