901 matches found
jq:jq_fuzz_parse_extended: Heap-buffer-overflow in decToString
Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=4714293282865152 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzparseextended Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6020000000c0...
Ubuntu 16.04 ESM : jq vulnerability (USN-4787-1)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-4787-1 advisory. It was discovered that jq did not perform sufficient bounds checking, resulting in unbounded resource consumption. An attacker could use this vulnerability to cau...
jq:jq_fuzz_compile: Segv on unknown address in decUnitCompare
Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5359579771568128 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzcompile Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: decUnitCompar...
jq:jq_fuzz_compile: Segv on unknown address in decUnitCompare
Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=6744378566377472 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzcompile Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: decUnitCompar...
Exploit for Improper Authentication in Redhat Keycloak
PoC for CVE-2023-0264 Keycloak vulnerability that allows ses...
SUSE CVE-2015-8863
Off-by-one error in the tokenadd function in jvparse.c in jq allows remote attackers to cause a denial of service crash via a long JSON-encoded number, which triggers a heap-based buffer overflow...
SUSE CVE-2016-4074
The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...
Ubuntu: Security Advisory (USN-4787-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2022-26642 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided input. Description: The input describes a method to automate the process of checking for publicly available Proof of Concepts POCs for specific CVEs using command-line tools. It...
Exploit for Path Traversal in Synacor Zimbra_Collaboration_Suite
Explotación Activa Sobre Zimbra CVE-2022-37042 RCE Unauthent...
MAL-2022-2367 Malicious code in dc-test-jq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfd0f813c9a00e7fa7804deeffffa87ae75cfebcc7a9135b5d2bdc51ff38a473 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dc-test-jq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfd0f813c9a00e7fa7804deeffffa87ae75cfebcc7a9135b5d2bdc51ff38a473 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
[SECURITY] Fedora 36 Update: xq-0.0.7-5.fc36
Command line XML beautifier and content extractor. Similar to jq...
[SECURITY] Fedora 36 Update: gojq-0.12.8-4.fc36
Pure Go implementation of jq...
Malicious code in require-jq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7305f50f59db220bfc80a952ab5be573b7d70d3889f37f817d3ef9af46c3c66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5756 Malicious code in require-jq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7305f50f59db220bfc80a952ab5be573b7d70d3889f37f817d3ef9af46c3c66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
[SECURITY] Fedora 35 Update: xq-0.0.7-4.fc35
Command line XML beautifier and content extractor. Similar to jq...
[SECURITY] Fedora 35 Update: gojq-0.12.8-3.fc35
Pure Go implementation of jq...