binutils:fuzz_objcopy: Segv on unknown address in htab_find_slot

Detailed Report: https://oss-fuzz.com/testcase?key=4726407330922496 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjcopy Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: htabfindslot bfdarchivecloseandcleanup...

PYSEC-2022-223

mat2 aka metadata anonymisation toolkit before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive...

mat2 路径遍历漏洞

mat2 is a metadata removal tool by the individual developer of jvoisin. A path traversal vulnerability exists in versions of mat2 prior to 0.13.0, which stems from a vulnerability that allows traversal during ZIP archive cleanup of the ... / directory during ZIP archive cleanup. An attacker could...

PT-2022-19588

Name of the Vulnerable Software and Affected Versions Subscribe To Comments Reloaded plugin versions = 211130 Description The issue affects the Subscribe To Comments Reloaded plugin on WordPress, allowing attackers to perform various actions due to multiple Cross-Site Request Forgery CSRF...

Nats-Server 路径遍历漏洞

Nats-Server is a high performance server for Nats.io, cloud and edge native messaging systems. A security vulnerability exists in the JetStream component of Nats-Server versions prior to 2.7.4, which stems from not properly cleaning up the elements of archive files.Users of NATS may cause the NAT...