GHSA-6VG3-HGRW-P5GF SurrealDB has an Authorization Bypass via Composite Record-id Paths

An authenticated user could bypass permission rules that gated access on parts of a record's id — most commonly tenant-isolation rules of the form PERMISSIONS FOR select WHERE id.tenant = $auth.id.tenant. The same defect also let UNIQUE constraints defined on parts of an id admit duplicate entrie...

EUVD-2021-30265

Malicious code in bioql PyPI...

Exploit for CVE-2024-48217

CVE-2024-48217 Sismart Vulnerability ---------------------------...

PT-2022-5757 · Mikrotik · Routeros +1

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions prior to stable v7.6 Description: The issue is related to an out-of-bounds read in the snmp process, allowing attackers to execute arbitrary code via a crafted packet. This is due to a buffer overflow vulnerability...

CVE-2021-43327

An issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can extract the security ID key from the device. Then, the protected firmware can be extracted...

Design/Logic Flaw

An issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can extract the security ID key from the device. Then, the protected firmware can be extracted...

CVE-2021-43327

CVE-2021-43327 concerns Renesas RX65/RX65N microcontrollers. The connected sources confirm a hardware fault-based vulnerability where a VCC glitch enables an attacker to extract the device’s security ID key, which then allows access to the protected firmware. The risk is materialized via local fa...

PT-2021-23814 · Renesas · Renesas Rx65

Name of the Vulnerable Software and Affected Versions: Renesas RX65 and RX65N devices affected versions not specified Description: An issue was discovered in Renesas RX65 and RX65N devices, where an attacker can extract the security ID key from the device using a VCC glitch. This allows the...