Cesanta MJS 安全漏洞

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

PT-2022-12754 · Cesanta · Cesanta Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 2.20.0 Description: A stack overflow issue was discovered in Cesanta MJS via the snquote function at mjs/src/mjs json.c. Recommendations: For Cesanta MJS version 2.20.0, consider restricting access to the snquote function ...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

KONNI evolves into stealthier RAT

This blog post was authored by Roberto Santos KONNI is a Remote Administration Tool that has being used for at least 8 years. The North Korean threat actor that is using this piece of malware has being identified under the Kimsuky umbrella. This group has been very busy, attacking political...

SUSE SLED15 / SLES15 Security Update : json-c (SUSE-SU-2022:0184-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0184-1 advisory. - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. bsc1171479 Tenable has extracted the preceding...

openSUSE 15 Security Update : json-c (openSUSE-SU-2022:0184-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0184-1 advisory. - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. CVE-2020-12762 No...

SUSE: Security Advisory (SUSE-SU-2022:0184-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:0184-1 Security update for json-c

This update for json-c fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. bsc1171479...

OPENSUSE-SU-2022:0184-1 Security update for json-c

This update for json-c fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. bsc1171479...

CTF-All-In-One

This is a comprehensive guide to CTF Capture The Flag competitions, specifically focusing on the Pwn binary exploitation aspect. The book is written by Yang Cheng, a member of L-Team, and is intended for beginners. It covers the basics of binary exploitation, including memory management, buffer...

Updated libreswan packages fix security vulnerability

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. CVE-2022-23094...

Updated mysql-connector-c++ packages fix security vulnerability

Buffer overflow due to inccorect calculation in EVPPKEYdecrypt. CVE-2021-3711 Denial of Service attack due to possible non-zero terminated strings. CVE-2021-3712...

Security update for json-c (important)

openSUSE Security Update: Security update for json-c Announcement ID: openSUSE-SU-2022:0184-1 Rating: important References: 1171479 Cross-References: CVE-2020-12762 CVSS scores: CVE-2020-12762 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-12762 SUSE: 7.8...

Jsish 安全漏洞

Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiArraySliceCmd in src/jsiArray.c...

Umbraco Password Reset Vulnerability

Umbraco is a Danish company Umbraco C written in open source content management system CMS. The Umbraco CMS suffers from a password reset vulnerability that stems from a lack of an effective trust management mechanism in a web-based system or product. An attacker could exploit the vulnerability t...

CVE-2021-46325

Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf...

Oracle MySQL Connectors (January 2022 CPU)

The 8.0.27 and prior versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory: - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++ OpenSSL. Supported versions that are...

VulturiBuilder Insecure Permissions Vulnerability

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/ca294b2f778abc14fef6313b3cea7155.txt Contact: email protected Media: twitter.com/malvuln Threat: VulturiBuilder Vulnerability: Insecure Permissions Description: The malware writes an .EXE with insecure...

Ransomware Builder Babuk Insecure Permissions Vulnerability

Ransomware Builder Babuk malware suffers from an insecure permissions vulnerability. Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/5dfa998f62612e10d5d28d26948dd50f.txt Contact: email protected Media: twitter.com/malvuln Threat: Ransomware Builder...