CVE-2022-33920

Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context...

Arbitrary Code Execution

kitty is vulnerable to arbitrary code execution. The vulnerability exists due to insufficient validation in the desktop notification escape sequence which allows an attacker to execute arbitrary codes in the system...

bind: memory leak in ECDSA DNSSEC verification code

A flaw was found in the Bind package. By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak, resulting in crashing the program...

CVE-2022-40123

mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the "f" parameter at /DesignTools/CssEditor.aspx. This vulnerability allows authenticated attackers to read arbitrary files in the system...

CVE-2022-23006

CVE-2022-23006 is a stack-based buffer overflow affecting Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi. The issue allows a local attacker to read the /etc/version file by exploiting a vulnerable code path that relies on insecure functions; exploitation requires chaining with ...

CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

Arbitrary Code Execution

d8s-json is vulnerable to arbitrary code execution. The vulnerability exists because the democritus-strings package of a specific version of d8s-json acts as a potential code execution backdoor which allows an attacker to inject and execute malicious codes in to the system...

poplarbluffrent.com Cross Site Scripting vulnerability OBB-2934015

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVars`

Impact If FakeQuantWithMinMaxVars is given min or max tensors of a nonzero rank, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf numbits = 8 narrowrange = False inputs = tf.constant0, shape=2,3, dtype=tf.float32 min = tf.constant0,...

TensorFlow vulnerable to `CHECK` fail in `TensorListFromTensor`

Impact When TensorListFromTensor receives an elementshape of a rank greater than one, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg0=tf.random.uniformshape=6, 6, 2, dtype=tf.bfloat16, maxval=None arg1=tf.random.uniformshape=6, 9, 1, 3,...

TensorFlow vulnerable to `CHECK` fail in `DrawBoundingBoxes`

Impact When DrawBoundingBoxes receives an input boxes that is not of dtype float, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg0=tf.constantvalue=np.random.randomsize=1, 3, 2, 3, shape=1, 3, 2, 3, dtype=tf.half...

TensorFlow vulnerable to `CHECK` fail in `RandomPoissonV2`

Impact When RandomPoissonV2 receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg0=tf.random.uniformshape=4,, dtype=tf.int32, maxval=65536 arg1=tf.random.uniformshape=4, 4, 4, 4, 4, dtype=tf.float32, maxval=None...

TensorFlow vulnerable to `CHECK` fail in `tf.random.gamma`

Impact When tf.random.gamma receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg0=tf.random.uniformshape=4,, dtype=tf.int32, maxval=65536 arg1=tf.random.uniformshape=4, 4, dtype=tf.float64, maxval=None...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. The vulnerability exists due to use-after-free in WebSQL which allows an attacker to inject and execute malicious codes in to the system...

CVE-2022-38613

A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system...

Google Chrome SplitScreen Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 105.0.5195.52, which stems from a mix-up in the instruction responsible for freeing memory in SplitScreen. An attacker could exploit this vulnerability...

Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics

AS SEEN ON EXPLOITDB: https://www.exploit-db.com/exploits/51026...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78520)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China.Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the setSmartPowerManagement function. An attacker could exploit this vulnerability to overflow the...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78517)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China. Tenda AC1206 V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the addWifiMacFilter function. An attacker could exploit this vulnerability to overflow the buffer and execu...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78518)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China.Tenda AC1206 V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the formQuickIndex function. An attacker could exploit this vulnerability to overflow the buffer and execute...