CVE-2022-32091

Removed by vendor...

CVE-2022-32081

Removed by vendor...

CVE-2022-32081

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepareinplaceaddvirtual at /storage/innobase/handler/handler0alter.cc...

ruby:fuzz_ruby_gems: Use-after-poison in rb_fstring

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4577580906315776 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fffdceaadd8 Crash...

ruby:fuzz_ruby_gems: Use-after-poison in to_float

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6003308789104640 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fe398e74d88 Crash...

ruby:fuzz_ruby_gems: Use-after-poison in rb_str_format

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4825843578306560 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7f6fcaef2db0 Crash...

ruby:fuzz_ruby_gems: Use-after-poison in rb_num2long

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4524954906918912 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7f06749e2c68 Crash...

CVE-2022-25989

An authentication bypass vulnerability exists in the libxmav.so getpeermac functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability...

Authentication flaw

An authentication bypass vulnerability exists in the libxmav.so getpeermac functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability...

CVE-2022-25989

An authentication bypass vulnerability exists in the libxmav.so getpeermac functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability...

CVE-2022-25989

Anker Eufy Homebase 2 (version 2.1.8.5h) contains an authentication bypass in the libxm_av.so getpeermac() function. A specially crafted DHCP packet can trigger DHCP poisoning to bypass authentication, enabling access to internal ports if the attacker can poison the network. TALOS reports the vul...

CVE-2022-22691 Umbraco Password Reset URL Poison

The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server thereby disclosing the password reset...

OSV-2022-35 Use-after-poison in absl::BytesToHexString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43554 Crash type: Use-after-poison READ 1 Crash state: absl::BytesToHexString...

PT-2022-36951

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as "Use-after-poison READ 1". The crash state involves the absl::BytesToHexString function. No information ...

tcmalloc:profile_builder_fuzz: Use-after-poison in absl::BytesToHexString

Project: https://github.com/google/tcmalloc.git Detailed Report: https://oss-fuzz.com/testcase?key=5100807425490944 Project: tcmalloc Fuzzing Engine: honggfuzz Fuzz Target: profilebuilderfuzz Job Type: honggfuzzasantcmalloc Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address:...

c-blosc2:decompress_frame_fuzzer: Use-after-poison in blosc_d

Detailed Report: https://oss-fuzz.com/testcase?key=6313529190252544 Project: c-blosc2 Fuzzing Engine: honggfuzz Fuzz Target: decompressframefuzzer Job Type: honggfuzzasanc-blosc2 Platform Id: linux Crash Type: Use-after-poison READ 4 Crash Address: 0x7fffe438e0bb Crash State: bloscd dojob...

Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway

Description an user can enter a text room in janus gateway with a malicious name that contains a xss payload and could poison other users on the room Proof of Concept just go to https://janus.conf.meetecho.com/textroomtest.html this is provided by github repo as a demo then enter in the name POC...

PT-2021-27825

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Use-after-poison READ 8. The crash state involves several function calls, including JS::Reference::put...

serenity:FuzzJs: Use-after-poison in JS::Reference::put_value

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5600458299801600 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJs Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address:...

libarchive:libarchive_fuzzer: Use-after-poison in read_children

Detailed Report: https://oss-fuzz.com/testcase?key=5833055716638720 Project: libarchive Fuzzing Engine: honggfuzz Fuzz Target: libarchivefuzzer Job Type: honggfuzzasanlibarchive Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fffe1978000 Crash State: readchildren...