CLSA-2021-1639686040 Fix CVE(s): CVE-2021-3984, CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069

SECURITY UPDATE: Using freed memory with regexp using a mark - debian/patches/CVE-2021-3974.patch: Get the line again after getting the mark position - CVE-2021-3974 SECURITY UPDATE: Illegal memory access when C-indenting - debian/patches/CVE-2021-3984.patch: Also set the cursor column -...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_object_prop_alloc

Project: http://hg.nginx.org/njs https://github.com/nginx/njs.git Detailed Report: https://oss-fuzz.com/testcase?key=4716020565147648 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 16...

PT-2021-7390 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Use After Free vulnerability in the vim text editor, specifically in the regexp nfa.c component. This vulnerability allows a remote attacker to access confidential dat...

LINE Credential Gatherer

This module searches for credentials in LINE desktop application on a Windows host. LINE is the most popular Instant Messenger app in Japan. Module Options msf use post/windows/gather/credentials/line msf postline show actions ...actions... msf postline set ACTION msf postline show options ...sho...

KakaoTalk Credential Gatherer

This module searches for KakaoTalk credentials on a Windows host. KakaoTalk is a popular mobile messaging app most widely used in South Korea. Module Options msf use post/windows/gather/credentials/kakaotalk msf postkakaotalk show actions ...actions... msf postkakaotalk set ACTION msf postkakaota...

Tango Credential Gatherer

This module searches for Tango credentials on a Windows host. Tango is a third-party, cross platform messaging application software for smartphones developed by TangoME, Inc. Module Options msf use post/windows/gather/credentials/tango msf posttango show actions ...actions... msf posttango set...

Flock Credential Gatherer

This module searches for credentials stored in Flock on a Windows host. Module Options msf use post/windows/gather/credentials/flock msf postflock show actions ...actions... msf postflock set ACTION msf postflock show options ...show and set options... msf postflock run This module requires...

XChat Credential Gatherer

This module searches for XChat credentials on a Windows host. XChat is an IRC chat program for both Linux and Windows. Module Options msf use post/windows/gather/credentials/xchat msf postxchat show actions ...actions... msf postxchat set ACTION msf postxchat show options ...show and set options...

ICQ Credential Gatherer

This module searches for ICQ credentials on a Windows host. Module Options msf use post/windows/gather/credentials/icq msf posticq show actions ...actions... msf posticq set ACTION msf posticq show options ...show and set options... msf posticq run This module requires Metasploit:...

njs:njs_process_script_fuzzer: Crash in njs_object_prop_alloc

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5646684554788864 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e000000c80 Crash State:...

CVE-2020-23306

There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...

CVE-2020-23306

There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...

UBUNTU-CVE-2020-23306

There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...

CVE-2020-23306

There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...

Stack overflow

There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...

CVE-2020-23306

There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...

CVE-2020-23306

Removed by vendor...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine . A stack overflow vulnerability exists in ecmaregexpmatch in ecma-regexp-object.c:535 in JerryScript version 2.2.0. No detailed vulnerability details are provided at this time...

CVE-2020-23306: Out-of-bounds Write

There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...

CVE-2021-23362

A regular expression denial of service vulnerability was found in hosted-git-info. If an application allows user input into the affected regular expression regexp function, shortcutMatch or fromUrl, then an attacker could craft a regexp which takes an ever increasing amount of time to process,...