CVE-2021-40716

CVE-2021-40716 affects Exempi/XMP Toolkit SDK (versions 2021.07 and earlier). The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR; exploitation requires user interaction (open a crafted file). Publicly documented fixes include: Debian has updated ex...

CVE-2021-40716 XMP Toolkit SDK SVG_Adapter Out-of-bounds Read Information Disclosure

XMP Toolkit SDK versions 2021.07 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...

CVE-2021-40716

XMP Toolkit SDK versions 2021.07 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...

Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.6.0 security & bugfix update

The Migration Toolkit for Containers MTC 1.6.0 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Red-Teaming-Toolkit

This is a collection of open source and commercial tools that aid in red team operations. The repository includes tools for reconnaissance, weaponization, delivery, command and control, lateral movement, establishing a foothold, escalating privileges, data exfiltration, and miscellaneous...

DEBIAN-CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

UBUNTU-CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

Nltk 代码问题漏洞

Nltk is a natural language toolkit. It is used to support research and development in natural language processing. A code issue vulnerability exists in nltk that stems from an error in certain regular expressions in the product. An attacker could cause a denial of service via this vulnerability...

OESA-2021-1347 jasper security update

The JasPer Project is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. Security Fixes: A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in...

Schneider Electric 多款产品授权问题漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug C-Bus installations on personal computers. An authorization issue vulnerability exists in several Schneider Electric products, which could allow remote code execution when a...

Migration Toolkit For Containers 数据伪造问题漏洞

Red Hat Migration Toolkit For Containers Mtc is a container migration toolkit from Red Hat, Inc. It is used to provide a web console and Api based on Kubernetes custom resources to help control migration and minimize application downtime. Migration Toolkit For Containers is vulnerable to a data...

Adobe XMP Toolkit SDK Out-of-Bounds Read Vulnerability (CNVD-2021-79742)

The Adobe XMP Toolkit SDK allows you to integrate XMP functionality into your product or solution.An out-of-bounds read vulnerability exists in Adobe XMP Toolkit SDK 2021.07 and earlier. An attacker could exploit this vulnerability to read arbitrary file systems...

PT-2021-6797 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2021.07 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such ...

Adobe XMP Toolkit SDK 缓冲区错误漏洞

The Adobe XMP Toolkit SDK allows you to integrate XMP functionality into your product or solution.An out-of-bounds read vulnerability exists in Adobe XMP Toolkit SDK 2021.07 and earlier. An attacker could exploit this vulnerability to read arbitrary file systems...

Apport 路径遍历漏洞

Apport is a toolkit for collecting and feeding back error messages information that the operating system finds useful when an application crashes. Apport has a security vulnerability that arises from an improperly designed or implemented code development process for a networked system or product...

APSB21-85 Security update available for Adobe XMP Toolkit SDK

Adobe has released updates for XMP Toolkit SDK. These updates resolve an important vulnerability. Successful exploitation could lead to arbitrary file system read in the context of the current user...

Linux Implementation of Cobalt Strike Beacon Targeting Organizations Worldwide

Researchers on Monday took the wraps off a newly discovered Linux and Windows re-implementation of Cobalt Strike Beacon that's actively set its sights on government, telecommunications, information technology, and financial institutions in the wild. The as-yet undetected version of the penetratio...

WordPress Gutenberg Block Editor Toolkit plugin <= 1.31.5 - Arbitrary PHP Code Execution vulnerability

Arbitrary PHP Code Execution vulnerability discovered by bl4derunner in WordPress Gutenberg Block Editor Toolkit plugin versions = 1.31.5. Solution Update the WordPress Gutenberg Block Editor Toolkit plugin to the latest available version at least 1.31.6...

TeamTNT’s New Tools Target Multiple OSes

The TeamTNT malware pushers have a slew of new toys with which to wreak havoc – multiple shell/batch scripts, open-source tools, a cryptocurrency miner, an IRC and more – that have inflicted more than 5,000 infections globally as antivirus AV tools struggle to catch up with the newest malware...

Security Bulletin: A security vulnerability has been fixed in IBM Security Identity Manager Virtual Appliance (CVE-2018-15494)

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerability due to remote attcker's ability to exploit this vulnerability. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper...