1191 matches found
AZL-45198 CVE-2023-6992 affecting package teckit for versions less than 2.5.12-4
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
AZL-43870 CVE-2023-6992 affecting package clucene 2.3.3.4-38
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
CVE-2023-6992
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
AZL-43969 CVE-2023-6992 affecting package ogdi 4.1.0-9
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
AZL-43807 CVE-2023-6992 affecting package teckit 2.5.9-4
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
Heap overflow
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
CVE-2023-6992 Memory corruption issues is Cloudflare zlib implementation
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
CVE-2023-6992 Memory corruption issues is Cloudflare zlib implementation
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
CVE-2023-6992
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
CVE-2023-6992
CVE-2023-6992 affects Cloudflare’s zlib; memory corruption in the deflate.c implementation from improper input validation can allow a local attacker to cause a denial of service during compression with a crafted file. Patch is in commit 8352d10 (Cloudflare zlib) and upstream appears unaffected; N...
PT-2024-15165 · Cloudflare · Zlib
Name of the Vulnerable Software and Affected Versions: Cloudflare version of zlib library affected versions not specified Description: The Cloudflare version of the zlib library was found to have memory corruption issues due to improper input validation and heap-based buffer overflow in the...
@0xclearview/svelte-tiny-virtual-table (>=0.0.1 <=0.0.4), @arc-dev/cli (>=0.0.2-alpha.7 <=0.0.2-alpha.27) +114 more potentially affected by CVE-2023-7080 via wrangler (>=3.100.0 <=3.18.0)
wrangler NPM version =3.100.0, =0.0.1, =0.0.2-alpha.7, =0.0.0-ast-20240419160649, =0.0.1, =1.0.0, =0.12.0, =0.12.0, =0.12.0, =0.12.0, =0.12.0, =0.13.12, =10.3.0, =1.0.166, =1.0.411 and more Source cves: CVE-2023-7080 Source advisory: OSV:GHSA-F8MP-X433-5WPF...
managed-component-to-cloudflare-worker (=1.5.2) potentially affected by CVE-2023-7080 via wrangler (=2.0.23)
wrangler NPM version =2.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on wrangler and may be impacted: - managed-component-to-cloudflare-worker =1.5.2 Source cves: CVE-2023-7080 Source advisory: OSV:GHSA-F8MP-X433-5WPF...
@askcodebase/wrangler (>=3.15.0 <=3.15.8), @astrojs/cloudflare (>=0.0.0-404-fix-20231115224256 <=8.0.1) +17 more potentially affected by CVE-2023-7078 via miniflare (>=3.20230904.0 <=3.20231030.1)
miniflare NPM version =3.20230904.0, =3.15.0, =0.0.0-404-fix-20231115224256, =1.0.274, =0.0.0-1e516e3, =0.9.0, =0.0.5, =0.2.0, =0.0.1, =0.0.6, =0.0.0-next-0ae7cbe-20231025215955, =0.0.0-next-0ae7cbe-20231025215955, =0.0.1, =0.0.1, =1.0.6, =2.0.7-alpha.1 and more Source cves: CVE-2023-7078 Source...
Miniflare vulnerable to Server-Side Request Forgery (SSRF)
Impact Sending specially crafted HTTP requests to Miniflare's server could result in arbitrary HTTP and WebSocket requests being sent from the server. If Miniflare was configured to listen on external network interfaces as was the default in wrangler until 3.19.0, an attacker on the local network...
Wrangler Authorization Issues Vulnerability
Cloudflare Wrangler is a repository from Cloudflare, Inc. A security vulnerability exists in Wrangler versions prior to 3.19.0, which stems from the fact that sending specially crafted HTTP requests and inspector messages could cause any file on a user's computer to be accessible over the local...
Cloudflare Wrangle Security Breach
Cloudflare Wrangler is a repository from Cloudflare, Inc. A security vulnerability exists in Cloudflare Wrangler versions prior to 3.19.0 that stems from the presence of an arbitrary code execution vulnerability that allows an attacker on a local network to connect to the inspector and run...
Top 20 Most Popular Hacking Tools in 2023
As last year, this year we made a ranking with the most popular tools between January and December 2023. The tools of this year encompass a diverse range of cybersecurity disciplines, including AI-Enhanced Penetration Testing, Advanced Vulnerability Management, Stealth Communication Techniques,...
