libvmod-digest 缓冲区错误漏洞

libvmod-digest is used to compute HMAC, message digests. A security vulnerability exists in libvmod-digest versions prior to 1.0.3, which stems from an out-of-bounds memory access during base64 decoding, leading to authentication bypass and information disclosure...

CVE-2022-25024

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

CVE-2022-25024

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

PYSEC-2023-149

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

PT-2023-12774 · Json2Xml · Json2Xml

Name of the Vulnerable Software and Affected Versions: json2xml versions through 3.12.0 Description: The issue allows an error in typecode decoding, enabling a remote attack that can lead to an exception, causing a denial of service. Recommendations: For versions through 3.12.0, consider updating...

Python 代码问题漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python version 3.12.0, which stems from an error in the decoding of the json2xm...

CVE-2022-25024

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

CVE-2022-25024

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

Important: containerd

Issue Overview: http2/hpack: avoid quadratic complexity in hpack decoding CVE-2022-41723 Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct...

www/varnish-libvmod-digest -- base64 decoding vulnerability

varnish developers report: Common usage of vmod-digest is for basic HTTP authentication, in which case it may be possible for an attacker to circumvent the authentication check. If the decoded result string is somehow being made visible to the attacker for example the result of the decoding is...

Faad2 buffer overflow vulnerability (CNVD-2026-15394)

Faad2 is a freeware advanced audio Aac decoder. It is used for Sbr decoding. Faad2 suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit this vulnerability to execute arbitrary code and cause a...

Rootstock Labs: DOS of RSKJ server

The RSKJ server was vulnerable to a Denial of Service DoS attack. The vulnerability was due to a flaw in the RLP Recursive Length Prefix decoding function, which could return a negative value, leading to a length of 0. This caused the server to process only one UDP packet forever, preventing it...

Nac_Bypass_Agent - This Function Combines All The Above Functions And Takes Necessary Information From The User To Change The IP And MAC Address, Start The Responder And Tcpdump Tools, And Run The Nbtscan Tool

Nac Bypass Agent This piece of code is a script written in Python and designed to run on Kali Linux. Here is a summary explaining what each function does: runcommandcommand: This function runs the command it takes as input and returns its output. killnetworkservices: This function stops the...

CVE-2023-28555

Transient DOS in Audio while remapping channel buffer in media codec decoding...

Code injection

Transient DOS in Audio while remapping channel buffer in media codec decoding...

CVE-2023-28555 Buffer Over-read in Audio

Transient DOS in Audio while remapping channel buffer in media codec decoding...

CVE-2023-28555

CVE-2023-28555 describes a transient DoS in audio during remapping of the channel buffer in the media codec decoding path. Public entries (NVD, Red Hat, etc.) consistently state a DoS impact with network access required and no user interaction. Android patch levels 2023-08-01/2023-08-05 include f...

CVE-2023-28555 Buffer Over-read in Audio

Transient DOS in Audio while remapping channel buffer in media codec decoding...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets contain a security vulnerability that originates from a transient DOS in the audio when the channel buffers are remapped in the media codec decoding...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm, an American company. A security vulnerability exists in the Qualcomm Chipsets that stems from a memory corruption when allocating memory in the COmxApeDec module of the Audio...