14675 matches found
PYSEC-2022-43155
wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component opCallIndirect at /m3exec.h...
kernel: nfsd buffer overflow by RPC message over TCP with garbage data
A buffer overflow flaw was found in the Linux kernel nfsd network file system subsystem. The way a user sends RPC over TCP with excess data added at the end of the message could allow a remote user to starve the resources, causing a denial of service...
kernel: nfsd buffer overflow by RPC message over TCP with garbage data
A buffer overflow flaw was found in the Linux kernel nfsd network file system subsystem. The way a user sends RPC over TCP with excess data added at the end of the message could allow a remote user to starve the resources, causing a denial of service...
PT-2022-27328 · Wasm3 · Wasm3
Name of the Vulnerable Software and Affected Versions: wasm3 version 7890a2097569fde845881e0b352d813573e371f9 Description: A segmentation fault was discovered in the op CallIndirect component at /m3 exec.h. Recommendations: For version 7890a2097569fde845881e0b352d813573e371f9, consider updating t...
wasm3 缓冲区错误漏洞
wasm3 is the fastest WebAssembly interpreter, as well as the most versatile runtime. A security vulnerability exists in wasm3, which stems from a segmentation error via the component opCallIndirect in /m3exec.h...
PT-2025-38418
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel contains a flaw in the Network File System NFS implementation nfsd related to handling reference counts during NFSv4.1 operations. Specifically, a double svc xprt put ca...
[NAZ-M2] Usage of send() Can Result In Revert
Lines of code Vulnerability details Impact Several functions are sendusing is used by the across several functions to transfer ETH/WETH. send uses a fixed amount of gas, which was used to prevent reentrancy. However this limit your protocol to interact with others contracts that need more than th...
Ubuntu 22.10 : Linux kernel (Azure) vulnerabilities (USN-5754-2)
The remote Ubuntu 22.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5754-2 advisory. It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker...
CVE-2022-4377
A vulnerability was found in S-CMS 5.0 Build 20220328. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Contact Information Page. The manipulation of the argument Make a Call leads to cross site scripting. The attack can be launched...
PT-2022-27027 · S Cms · S-Cms
Name of the Vulnerable Software and Affected Versions: S-CMS version 5.0 Build 20220328 Description: A vulnerability was found in the Contact Information Page component, where the manipulation of the Make a Call argument leads to cross-site scripting. The attack can be launched remotely...
Phishing Scams: How To Recognize A Scam Email, VOIP call, or Text
By Owais Sultan A phishing scam is not only about stealing your login credentials, but it can also install malware, including ransomware, which is why it is essential to learn how to tackle this growing threat. This is a post from HackRead.com Read the original post: Phishing Scams: How To...
CVE-2022-39902
Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...
CVE-2022-39903
Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number...
CVE-2022-39903
Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number...
Authorization
Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...
CVE-2022-39902
Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...
CVE-2022-39903
Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number...
PT-2022-25096 · Rcs · Rcs
Name of the Vulnerable Software and Affected Versions: RCS versions prior to SMR Dec-2022 Release 1 Description: The issue is related to improper access control in RCS calls, allowing local attackers to access the incoming call number. Recommendations: For versions prior to SMR Dec-2022 Release 1...