Autodesk Design Review Code Execution

The vulnerability of the PDF syntax analysis implementation of the Autodesk Design Review software relates to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

CVE-2021-27293

RestSharp 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service ReDoS when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus...

CVE-2021-27293

RestSharp 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service ReDoS when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus...

CVE-2021-27293: Incorrect Comparison

RestSharp 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service ReDoS when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus...

PT-2021-17385

Name of the Vulnerable Software and Affected Versions RestSharp versions prior to 106.11.8-alpha.0.13 Description The issue arises from a vulnerable regular expression used when converting strings into DateTimes, making it susceptible to Regular Expression Denial of Service ReDoS. If a server...

double-conversion:string_to_double_fuzzer: Dynamic-stack-buffer-overflow in double_conversion::uint64_to_double

Project: https://github.com/google/double-conversion.git Detailed Report: https://oss-fuzz.com/testcase?key=5805081697058816 Project: double-conversion Fuzzing Engine: afl Fuzz Target: stringtodoublefuzzer Job Type: aflasandouble-conversion Platform Id: linux Crash Type:...

Conversion from `prost_types::Timestamp` to `SystemTime` can cause an overflow and panic

Affected versions of this crate contained a bug in which untrusted input could cause an overflow and panic when converting a Timestamp to SystemTime. It is recommended to upgrade to prost-types v0.8 and switch the usage of From for SystemTime to TryFrom for SystemTime. See 438 for more informatio...

Linux eBPF Unauthorized Access

The vulnerability of the eBPF subsystem in the Linux operating system is related to a type conversion error. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...

Xstream Java Library Command Injection File Deletion

The vulnerability of the Java library for converting objects to XML or JSON format, Xstream, exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability can allow a malicious actor to delete any known files on the host...

CVE-2021-0563

In ih264efmtconv422ito420sp of ih264efmtconv.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Linux/x86 Custom Shellcode ASCII And-Sub Encoder

/ Title: Linux/x86 - Custom Shellcode ASCII And-Sub Encoder Date: 29.03.2021 Author: Xenofon Vassilakopoulos github : https://github.com/xen0vas/ASCII-AND-SUB-Encoder gcc -m32 sub.c -o sub Usage : ./sub -s \x41\xff\x41\x41 -b \x0a\x0d\x2f\x3a\x3f\x40\x80\x81\x82 / include include include include...

EIP Stack Group OpENer Ethernet/IP UDP handler information disclosure vulnerability

Summary An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read. Tested Versions EIP Stack Group OpENer 2.3 EIP Stack Group OpENe...

Linux kernel Information Disclosure

The vulnerability of the system call implementation /proc/pid/syscall in Linux kernels is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SUSE: Security Advisory (SUSE-SU-2018:4193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 34 Update: mapserver-7.6.3-1.fc34

Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...

CVE-2021-32655 Files Drop public link can be added as federated share

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to convert a Files Drop link to a federated share. This causes an issue on the UI side of the sharing user. When the sharing user opens the sharing panel and...

openSUSE Security Update : libxls (openSUSE-2021-812)

This update for libxls fixes the following issues : libxsl was updated to release 1.6.2 : - Fix NULL pointer dereferences in the xls2csv tool boo1179532 CVE-2020-27819 Update to release 1.6.1 - Enabled decoding of non-Unicode character sets in older BIFF5 XLS files. - Improved string conversion...

Accusoft ImageGear PNG png_palette_process memory corruption vulnerability

Summary A memory corruption vulnerability exists in the PNG pngpaletteprocess functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide malicious inputs to trigger this vulnerability. Tested Versions Accusoft ImageGear...

Incorrect type conversion in the contract ABC makes users unable to burn FSD tokens

Handle shw Vulnerability details Impact The function calculateDeltaOfFSD of contract ABC incorrectly converts an int256 type parameter, reserveDelta, to uint256 by explicit conversion, which in general results in an extremely large number when the provided parameter is negative. The extremely lar...

Incorrect type conversion in the contract ABC makes users unable to burn FSD tokens

Handle shw Vulnerability details Editing on a previous post to correct some details Impact The function calculateDeltaOfFSD of contract ABC incorrectly converts an int256 type parameter, reserveDelta, to uint256 by explicit conversion, which in general results in an extremely large number when th...