Buffer Over-read in function find_next_quote in vim/vim

...

Heap buffer overflow in vim_strncpy find_word in vim/vim

...

Attackers can Install Malware on iPhone When it is Powered Off – Research

By Deeba Ahmed The iOS Find My feature has a safety loophole that can lead to infecting the iPhone even if… This is a post from HackRead.com Read the original post: Attackers can Install Malware on iPhone When it is Powered Off - Research...

Researchers Find Potential Way to Run Malware on iPhone Even When it's OFF

A first-of-its-kind security analysis of iOS Find My function has identified a novel attack surface that makes it possible to tamper with the firmware and load malware onto a Bluetooth chip that's executed while an iPhone is "off." The mechanism takes advantage of the fact that wireless chips...

PT-2022-2732

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4979 Description The issue is related to a Use After Free error in the Vim text editor. This error is associated with the find pattern in path function and involves the use of memory after it has been freed...

GHSA-CCMR-QJ26-845G Improper Restriction of XML External Entity Reference in Elasticsearch

Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's findfilestructure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager then an attacker could send a specially crafted request capable of leaking content ...

PT-2022-2606

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2 Description The issue is related to a segmentation violation via the njs lvlhsh bucket find function at njs lvlhsh.c in the Nginx NJS interpreter. This can lead to an uncontrolled resource consumption, potentially...

DEBIAN-CVE-2022-1629

Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution...

ALPINE-CVE-2022-1629

Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution...

UBUNTU-CVE-2022-1629

Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution...

ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find()

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in Vim prior to version 8.2.4919, which stems from a vimstrncpy findword heap buffer overflow, which can cause software crashes, bypass protection mechanisms, modify memory, and remote execution...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 8.2.4925 that stems from a buffer over-read in the findnextquote function, which can lead to a software crash, memory modification, and remote execution...

PT-2022-2731

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4925 Description The issue is related to a buffer over-read in the find next quote function, which can cause the operation to exceed the buffer boundaries in memory. Exploitation of this issue may allow an attacker to...

What Are Dark Web Search Engines and How to Find Them?

By Waqas Let’s take a closer look at what a dark web search engine is, how to find them and… This is a post from HackRead.com Read the original post: What Are Dark Web Search Engines and How to Find Them?...

PT-2022-19924

Name of the Vulnerable Software and Affected Versions LibreHealth EHR version 2.0.0 Description The issue is related to a lack of sanitization of the GET parameters formseq and formid in the "interface/orders/find order popup.php" endpoint, leading to multiple cross-site scripting XSS...

PT-2025-8381

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically related to the of find compatible node function, which increments the refcount of the returned device node. To...

WordPress Better Find and Replace plugin <= 1.3.4 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered in WordPress Better Find and Replace plugin versions = 1.3.4. Solution Update the WordPress Better Find and Replace plugin to the latest available version at least 1.3.5...

PT-2022-2730

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4919 Description The issue is related to a heap buffer overflow in the vim strncpy find word function, which can cause software crashes, bypass protection mechanisms, modify memory, and potentially allow remote...

PT-2022-36968

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. The crash state indicates involvement of functions such as sc asn1 read tag, sc asn1 find tag,...