CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

UBUNTU-CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

PT-2023-18223 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authorization implementation, which leads to incorrect handling of unencrypted messages. Recommendations: For versions prior to SMR Mar-202...

CVE-2023-28486

CVE-2023-28486 affects the sudo utility; the affected component is sudo prior to version 1.9.13, which does not escape control characters in log messages. Multiple connected advisories confirm the issue and subsequent fixes across distributions (e.g., Debian LTS advisory DLA-4472-1 for sudo 1.9.5...

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

PT-2023-19307 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions 3.0.1 and prior Discourse versions 3.1.0.beta2 and prior Description: The issue affects the count of personal messages displayed for a tag, which includes all personal messages regardless of visibility to a given user. This...

golang: encoding/gob: stack exhaustion in Decoder.Decode

A flaw was found in golang. When calling Decoder, Decode on a message that contains deeply nested structures, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...

Exploit for Generation of Error Message Containing Sensitive Information in Readtomyshoe_Project Readtomyshoe

CVE-2023-27587-PoC The simple PoC of CVE-2023-27587 What i...

Sensitive Information in Error Messages in Apache Airflow

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2. The traceback contains information that might be useful for a potential attacker to better target their attack Python/Airflow...

Sudo 安全漏洞

Sudo is a program used on Unix-like systems that allows users to execute commands in a secure manner with special privileges. A security vulnerability exists in versions of Sudo prior to 1.9.13 that stems from the fact that Sudo does not escape control characters in log messages...

OpenSIPS 输入验证错误漏洞

OpenSIPS is a GPL-licensed SIP server implementation from the individual developers of OpenSIPS. An input validation error vulnerability exists in OpenSIPS version 3.2.5 and prior versions, which stems from the fact that both large Content-Length values and incorrectly formatted SIP messages can...

PT-2023-20252 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.5.2 Description: The issue is related to the generation of error messages containing sensitive information. This could potentially provide useful information to attackers, including the Python/Airflow versio...

PT-2023-21557 · Opensips · Opensis

Name of the Vulnerable Software and Affected Versions: OpenSIPS versions prior to 3.1.9 and 3.2.6 Description: OpenSIPS is a Session Initiation Protocol SIP server implementation. A malformed SIP message containing a large Content-Length value and a specially crafted Request-URI causes a...

OpenSIPS 输入验证错误漏洞

OpenSIPS is a GPL-licensed SIP server implementation from the individual developers of OpenSIPS. An input validation error vulnerability exists in OpenSIPS prior to 3.1.8 and prior to 3.2.5, which stems from a segmentation error that causes a crash when the rewriteruri function processes speciall...

PT-2023-21237 · Opensips · Opensis

Name of the Vulnerable Software and Affected Versions: OpenSIPS versions prior to 3.1.8 and 3.2.5 Description: OpenSIPS is a Session Initiation Protocol SIP server implementation. When a specially crafted SIP message is processed by the function rewrite ruri, a crash occurs due to a segmentation...

Apache Airflow 安全漏洞

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. The platform is scalable and dynamically monitored, etc. An information disclosure vulnerability exists in versions prior to Apache Airflow 2.5.2, which stems from the fact that...

GO-2023-1631 Panic when parsing invalid messages in google.golang.org/protobuf

Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic...