UBUNTU-CVE-2022-33747

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M Physical-to-Machine mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation to replace a...

CVE-2022-38465

A vulnerability has been identified in SIMATIC Drive Controller family All versions V2.9.2, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V21.9, SIMATIC S7-1200 CPU family incl...

CVE-2022-33747

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M Physical-to-Machine mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation to replace a...

CVE-2022-33747

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M Physical-to-Machine mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation to replace a...

PT-2022-8561 · Xiaomi · Xiaomi Security Center

Name of the Vulnerable Software and Affected Versions: Xiaomi Security Center affected versions not specified Description: The issue concerns the security of Xiaomi users worldwide. There is no specific information about the nature of the problem or its technical details. Recommendations: At the...

Siemens SIMATIC S7-1200 and S7-1500 CPU Families

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SIMATIC S7-1200 and S7-1500 CPU families Vulnerability: Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could expose confidential configuration data...

openSUSE 15 Security Update : pngcheck (openSUSE-SU-2022:10142-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10142-1 advisory. - A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.05 patches applied via a crafted png file. CVE-2020-35511 Note that...

globalteachinginsights.org Cross Site Scripting vulnerability OBB-2975465

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Researcher Spotlight: Globetrotting with Yuri Kramarz

From the World Cup in Qatar to robotics manufacturing in east Asia, this incident responder combines experience from multiple arenas By Jon Munshaw. Yuri “Jerzy” Kramarz helped secure everything from the businesses supporting the upcoming World Cup in Qatar to the Black Hat security conference an...

Researcher Spotlight: Globetrotting with Yuri Kramarz

From the World Cup in Qatar to robotics manufacturing in east Asia, this incident responder combines experience from multiple arenas Yuri "Jerzy" Kramarz helped secure everything from the businesses supporting the upcoming World Cup in Qatar to the Black Hat security conference and critical...

The Top 5 Cloud Vulnerabilities You Should Know Of

By Waqas After the pandemic hit in 2020 cloud computing gained a lot of adoption, globally. The velocity of cloud… This is a post from HackRead.com Read the original post: The Top 5 Cloud Vulnerabilities You Should Know Of...

Use of globalState.unlocked state change outside lock modifier allows for Re-entrancy which would cause huge loss to pool

Lines of code Vulnerability details I guess I can put this into one report since the issue affects two seperate functions in a contract. Impact The functions AlgebraPool.swap and AlgebraPool.swapSupportingFeeOnInputTokens attempt to not use the lock modifier to update the globalState.unlocked sta...

CVE-2022-38932

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...

calicheglobal.com Cross Site Scripting vulnerability OBB-2958688

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-38932

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...

CVE-2022-38932

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...

CVE-2022-38932

ToaruOS 2.0.1 is affected by a readelf component vulnerability that introduces a global overflow when parsing crafted ELF files, enabling remote code execution. Root cause: a global overflow in readelf. Impact: remote code execution if untrusted ELF files are parsed. Mitigation/workaround from PT...

ToaruOS 缓冲区错误漏洞

ToaruOS is an open source computer operating system written in the C language. A code execution vulnerability exists in ToaruOS version 2.0.1, which stems from a global overflow in readelf, and can be exploited to remotely execute code while parsing a specially crafted ELF file...

PT-2022-24621 · Toaruos · Toaruos

Name of the Vulnerable Software and Affected Versions: ToaruOS version 2.0.1 Description: The issue allows for remote code execution when a crafted ELF file is parsed, due to a global overflow in the readelf component. Recommendations: For ToaruOS version 2.0.1, consider avoiding the use of reade...

Security Bulletin: Security Vulnerabilites fixed in IBM WebSphere Application Server 8.5.0.2

Abstract Cross reference list for security vulnerabilities fixed in IBM WebSphere Application Server Fix Pack 8.5.0.2 Content VULNERABILITY DETAILS: CVE ID:CVE-2013-0458 PM71139 DESCRIPTION: WebSphere Application Server could allow a cross-site scripting attack, caused by improper validation of...