Hypervisor-101-in-Rust

Hypervisor 101 in Rust The materials of the "Hypervisor 101 in Rust" class held at Global Cybersecurity Camp 2023 Singapore. This repository contains a fuzzing hypervisor for UEFI on Intel/AMD processors, lecture and hands-on exercise materials, and sample corpus and target files. Read the course...

Curiouser and Curiouser

Welcome to this week's edition of the Threat Source newsletter. " Experiment is the mother of knowledge." ― Madeleine L'Engle, A Wrinkle in Time " Don't slide down the rabbit hole. The way down is a breeze, but climbing back's a battle." ― Kate Morton, The Clockmaker's Daughter Hacker Summer Camp...

camp (15.2.23), directdetect (>=1.0.0, <=1.2.0) +3 more potentially affected by unknown CVE via localeval (>=13.12.11, <=15.2.3)

localeval NPM version =13.12.11, =1.0.0, =1.0.0, =1.0.1 - mocha-test-runner 0.4.3 Source cves: unknown CVE Source advisory: MEND:WS-2020-0086...

CVE-2026-24556

Missing Authorization vulnerability in wpdive ElementCamp element-camp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementCamp: from n/a through = 2.3.2...

CVE-2026-24556

Missing Authorization vulnerability in wpdive ElementCamp element-camp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementCamp: from n/a through = 2.3.2...

PT-2026-4398

Name of the Vulnerable Software and Affected Versions ElementCamp versions prior to 2.3.3 Description An authorization issue exists in ElementCamp that allows exploitation of incorrectly configured access control security levels. Recommendations Update ElementCamp to a version later than 2.3.2...

EUVD-2014-1331

Malware in sbrugna...

EUVD-2008-3940

Malware in sbrugna...

EUVD-2021-17592

Malware in sbrugna...

EUVD-2023-42788

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-39039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. CVE-2023-39039 Note that...

CVE-2024-48534

A reflected cross-site scripting XSS vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2023-39039

An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2021-30675

A memory corruption issue was addressed with improved state management. This issue is fixed in Boot Camp 6.1.14. A malicious application may be able to elevate privileges...

CVE-2024-48534

A reflected cross-site scripting XSS vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2024-48534

A reflected cross-site scripting XSS vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2024-48534

A reflected cross-site scripting XSS vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2024-48534: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

PT-2024-33134

Name of the Vulnerable Software and Affected Versions eSoft Planner version 3.24.08271-USA Description A reflected cross-site scripting XSS issue in the Camp Details module allows attackers to execute arbitrary code in the context of a user's browser by injecting a crafted payload. This enables t...

PT-2024-29894

Name of the Vulnerable Software and Affected Versions PDFio versions prior to 1.3.1 Description The issue concerns a denial of service DOS vulnerability in the TTF parser of the PDFio library. Maliciously crafted TTF files can cause the program to utilize 100% of the memory and enter an infinite...