Backdoor.Win32.Whirlpool.10 Remote Stack Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/bf0682b674ef23cf8ba0deeaf546f422.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Whirlpool.10 Vulnerability: Remote Stack Buffer Overflow Description: Whirlpool liste...

Backdoor.Win32.Ncx.bt Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/ad5c01b3e6d0254adfe0898c6d16f927.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Ncx.bt Vulnerability: Remote Stack Buffer Overflow Description: The malware listens o...

Security Bulletin: A vulnerability in Apache Solr (lucene) affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Solr lucene was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2017-3164 DESCRIPTION: Apache Solr is vulnerable to server-side request forgery, caused by not having corresponding allowlist mechanism in the shards parameter. By...

bleach:linkify_fuzzer: Uncaught exception in convert_entity

Project: https://github.com/mozilla/bleach.git Detailed Report: https://oss-fuzz.com/testcase?key=5635626013687808 Project: bleach Fuzzing Engine: libFuzzer Fuzz Target: linkifyfuzzer Job Type: libfuzzerasanbleach Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

CVE-2021-23900

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...

CVE-2021-23900

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...

OSV-2021-69 Uncaught exception in fuzz_loader.pkg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29519 Crash type: Uncaught exception Crash state: fuzzloader.pkg fuzzloader.pkg fuzzloader.pkg...

CVE-2021-23900: Undefined Security Weakness

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...

PT-2021-15601

Name of the Vulnerable Software and Affected Versions: OWASP json-sanitizer versions prior to 1.2.2 Description: The issue arises when crafted input is processed, potentially leading to the output of invalid JSON or the throwing of an undeclared exception. This situation may result in a denial of...

pyyaml:fuzz_loader: Uncaught exception in fuzz_loader.pkg

Detailed Report: https://oss-fuzz.com/testcase?key=5369275126775808 Project: pyyaml Fuzzing Engine: libFuzzer Fuzz Target: fuzzloader Job Type: libfuzzerasanpyyaml Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: fuzzloader.pkg fuzzloader.pkg fuzzloader.pkg Sanitizer:...

pygments:pygments_fuzzer: Uncaught exception in popstate_tag_callback

Project: https://github.com/pygments/pygments.git Detailed Report: https://oss-fuzz.com/testcase?key=5950214416498688 Project: pygments Fuzzing Engine: libFuzzer Fuzz Target: pygmentsfuzzer Job Type: libfuzzerasanpygments Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash Stat...

Backdoor.Win32.Zombam.k Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/79d9908b6769e64f922e74a090f5ceeb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.k Vulnerability: Remote String Dereference Stack Buffer Overflow Description:...

MTN Group: RCE Apache Struts2 remote command execution (S2-045) on [wifi-partner.mtn.com.gh]

Summary: A Remote Code Execution vulnerability exists in Apache Struts2 when performing file upload based on Jakarta Multipart parser. It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then used to...

PT-2021-4094

Name of the Vulnerable Software and Affected Versions JerryScript version 2.4.0 Description The issue is related to insufficient checking of unusual or exceptional states in the main print unhandled exception function of the main-utils.c file. This can be exploited by a remote attacker to cause a...

scapy:pcap_fuzzer: Uncaught exception in read_block_idb

Project: https://github.com/secdev/scapy.git Detailed Report: https://oss-fuzz.com/testcase?key=5095021418250240 Project: scapy Fuzzing Engine: libFuzzer Fuzz Target: pcapfuzzer Job Type: libfuzzerasanscapy Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: readblockidb...

CVE-2020-5801

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affect...

CVE-2020-5802

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions ...

CVE-2020-5802

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions ...

CVE-2020-5807

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

Code injection

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affect...