jackson-dataformats-binary:IonParserFuzzer: Security exception in java.base/java.util.Arrays.copyOfRange

Project: https://github.com/FasterXML/jackson-dataformats-binary.git Detailed Report: https://oss-fuzz.com/testcase?key=6200024929206272 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: IonParserFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux...

CVE-2024-22410: Untrusted Search Path

Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loads a suite of DLLs provided by Microsoft at startup. If a malicious user has access to overwrite the program files directory it is possible to replace these DLLs and execute...

OpenJDK: Multiple Vulnerabilities

Background OpenJDK is an open source implementation of the Java programming language. Description Multiple vulnerabilities have been discovered in OpenJDK. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

PT-2024-19401 · Unknown · Creditcoin

Name of the Vulnerable Software and Affected Versions: Creditcoin affected versions not specified Description: The issue concerns the Windows binary of the Creditcoin node, which loads a suite of DLLs provided by Microsoft at startup. If a malicious user has access to overwrite the program files...

CVE-2023-49351

A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite other values located on the stack due to an incorrect use of the strcpy function...

jackson-dataformats-binary:IonParserFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5211471600484352 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: IonParserFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jackson-dataformats-binary:DeserializerFuzzer: Security exception in com.amazon.ion.impl.IonCursorBinary.ensureCapacity

Detailed Report: https://oss-fuzz.com/testcase?key=5861863497728000 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: DeserializerFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2023-49351

A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite other values located on the stack due to an incorrect use of the strcpy function...

PT-2024-13733 · Edimax · Edimax Br6478Ac

Name of the Vulnerable Software and Affected Versions: Edimax BR6478AC V2 firmware version v1.23 Description: A stack-based buffer overflow vulnerability in the /bin/webs binary allows attackers to overwrite other values located on the stack due to an incorrect use of the strcpy function...

EulerOS 2.0 SP10 : golang (EulerOS-SA-2023-2810)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The encoding/xml package in Go all versions does not correctly preserve the semantics of attribute namespace prefixes during tokenization...

EulerOS 2.0 SP11 : golang (EulerOS-SA-2023-2859)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when running a go program which...

Edimax BR6478AC Security Vulnerability

Edimax BR6478AC is a router from Edimax. A security vulnerability exists in Edimax BR6478AC V2 v1.23, which originates from a buffer overflow vulnerability in the /bin/webs binary...

Debian dsa-5599 : php-seclib - security update

The remote Debian 11 / 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5599 advisory. - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such...

jackson-dataformats-binary:CborParserFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Project: https://github.com/FasterXML/jackson-dataformats-binary.git Detailed Report: https://oss-fuzz.com/testcase?key=5142631663337472 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: CborParserFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux...

Arcserve UDP Agent Path Traversal (CVE-2023-42000)

Binary data arcserveudpcve-2023-42000.nbin...

KTextEditor: Arbitrary Local Code Execution

Background Framework providing a full text editor component for KDE. Description A vulnerability has been discovered in KTextEditor. Please review the CVE identifiers referenced below for details. Impact KTextEditor executes binaries without user interaction in a few cases, e.g. KTextEditor will...

OESA-2024-1066 openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and...

OESA-2024-1059 libssh security update

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

OESA-2024-1065 openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and...

Cryptominers Targeting Misconfigured Apache Hadoop and Flink with Rootkit in New Attacks

Cybersecurity researchers have identified a new attack that exploits misconfigurations in Apache Hadoop and Flink to deploy cryptocurrency miners within targeted environments. "This attack is particularly intriguing due to the attacker's use of packers and rootkits to conceal the malware," Aqua...