CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

Arbitrary Code Execution

d8s-json is vulnerable to arbitrary code execution. The vulnerability exists because the democritus-strings package of a specific version of d8s-json acts as a potential code execution backdoor which allows an attacker to inject and execute malicious codes in to the system...

poplarbluffrent.com Cross Site Scripting vulnerability OBB-2934015

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVars`

Impact If FakeQuantWithMinMaxVars is given min or max tensors of a nonzero rank, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf numbits = 8 narrowrange = False inputs = tf.constant0, shape=2,3, dtype=tf.float32 min = tf.constant0,...

TensorFlow vulnerable to `CHECK` fail in `TensorListFromTensor`

Impact When TensorListFromTensor receives an elementshape of a rank greater than one, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg0=tf.random.uniformshape=6, 6, 2, dtype=tf.bfloat16, maxval=None arg1=tf.random.uniformshape=6, 9, 1, 3,...

TensorFlow vulnerable to `CHECK` fail in `DrawBoundingBoxes`

Impact When DrawBoundingBoxes receives an input boxes that is not of dtype float, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg0=tf.constantvalue=np.random.randomsize=1, 3, 2, 3, shape=1, 3, 2, 3, dtype=tf.half...

TensorFlow vulnerable to `CHECK` fail in `RandomPoissonV2`

Impact When RandomPoissonV2 receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg0=tf.random.uniformshape=4,, dtype=tf.int32, maxval=65536 arg1=tf.random.uniformshape=4, 4, 4, 4, 4, dtype=tf.float32, maxval=None...

TensorFlow vulnerable to `CHECK` fail in `tf.random.gamma`

Impact When tf.random.gamma receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg0=tf.random.uniformshape=4,, dtype=tf.int32, maxval=65536 arg1=tf.random.uniformshape=4, 4, dtype=tf.float64, maxval=None...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. The vulnerability exists due to use-after-free in WebSQL which allows an attacker to inject and execute malicious codes in to the system...

CVE-2022-38613

A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system...

Google Chrome SplitScreen Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 105.0.5195.52, which stems from a mix-up in the instruction responsible for freeing memory in SplitScreen. An attacker could exploit this vulnerability...

Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics

AS SEEN ON EXPLOITDB: https://www.exploit-db.com/exploits/51026...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78513)

Tenda AC1206 is a wireless pass-through king gigabit router from Tenda China. Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability, which is caused by improper boundary checking of the formSetPPTPServer function. An attacker can exploit this vulnerability to overflow...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78519)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China.Tenda AC1206 V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the fromSetIpMacBind function. An attacker could exploit this vulnerability to overflow the buffer and execut...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78520)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China.Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the setSmartPowerManagement function. An attacker could exploit this vulnerability to overflow the...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78518)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China.Tenda AC1206 V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the formQuickIndex function. An attacker could exploit this vulnerability to overflow the buffer and execute...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78515)

Tenda AC1206 is a wireless through-the-wall king gigabit router from Tenda China. Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the formSetFirewallCfg function. An attacker can exploit this vulnerability to overflow the...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78517)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China. Tenda AC1206 V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the addWifiMacFilter function. An attacker could exploit this vulnerability to overflow the buffer and execu...

CVE-2022-2638 Export All URLs < 4.4 - Admin+ Arbitrary System File Removal

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...

Levels of Assurance for DoD Microelectronics

The NSA has has published criteria for evaluating levels of assurance required for DoD microelectronics. The introductory report in a DoD microelectronics series outlines the process for determining levels of hardware assurance for systems and custom microelectronic components, which include...