973 matches found
CVE-2022-40674
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...
Stable Channel Update for Desktop
The Stable channel has been updated to 105.0.5195.102 for Windows,Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of...
karinahehomes.com Cross Site Scripting vulnerability OBB-2881465
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-23210
A floating point exception divide-by-zero issue was discovered in SoX in functon readsamples of voc.c file. An attacker with a crafted file, could cause an application to crash...
GitHub Security Lab: [JAVA]: Partial Path Traversal
This bug was reported directly to GitHub Security Lab...
OSV-2022-750 Heap-buffer-overflow in do_job
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50433 Crash type: Heap-buffer-overflow WRITE 4 Crash state: dojob blosccompresscontext blosc2compressctx...
evergreeninfrastructure.com.au Cross Site Scripting vulnerability OBB-2831350
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The Bug Report – July 2022 Edition
The Bug Report – July 2022 Edition By Trellix · August 3, 2022 This story was also written by Kasimir Schulz and Jesse Chick Your Cybersecurity Comic Relief Why am I here? Welcome to the Bug Report, Heat Wave Edition! In the face of chronic irritability and soggy-pants syndrome, we are back at it...
PT-2025-25939
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the f2fs file system has been found, where the NAT entry and nat bitmap can be inconsistent. This inconsistency can trigger a BUG ON in the f2fs new node page function. The issu...
UNIT4 TETA Mobile SQL注入漏洞
UNIT4 TETA Mobile is a web-based application from UNIT4. It can be used on desktop and mobile devices, including smartphones and tablets. A security vulnerability exists in UNIT4 TETA Mobile versions prior to 29.5.HF17 that stems from the ProfileName parameter in the bug report page containing an...
cpia.afdb.org Cross Site Scripting vulnerability OBB-2705673
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
LinkedIn: IDOR allows an attacker to delete anyone's featured photo.
An Insecure Direct Object Reference IDOR vulnerability allowed an attacker to delete anyone's featured photo on LinkedIn by manipulating the parameters in the delete request. This vulnerability was exploited by obtaining the necessary parameters from the victim's profile link and replacing them i...
CVE-2022-20204
In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CRLFsuite - Fast CRLF Injection Scanning Tool
CRLFsuite is a fast tool specially designed to scan CRLF injection. Installation $ git clone https://github.com/Nefcore/CRLFsuite.git $ cd CRLFsuite $ sudo python3 setup.py install $ crlfsuite -h Features Single URL scanning Multiple URL scanning Stdin supported GET & POST method supported...
CVE-2022-30785
A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
OSV-2022-422 UNKNOWN WRITE in alloc_restore_step_in
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47513 Crash type: UNKNOWN WRITE Crash state: allocrestorestepin allocrestoreall gsmainfinit...
Chrome For Android Update
Hi, everyone! We've just released Chrome 101 101.0.4951.61 for Android: it'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let us know by...
OSV-2022-398 Heap-buffer-overflow in json_common_entity_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47259 Crash type: Heap-buffer-overflow READ 8 Crash state: jsoncommonentitydata dwgjsonREPEAT dwgjsonobject...
Incorrect Default Permissions in CRI-O
Impact A bug was found in CRI-O where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve2...