CVE-2022-38132

Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands. The username and password fields are not sanitized correctly and are used as URL...

Path Traversal

gravitee-gateway-core is vulnerable to path traversal. The vulnerability exists due to the lack of dynamic routing checks in the selectUserDefinedEndpoint function of TargetEndpointResolver.java, allowing an attacker to read arbitrary files outside the expected directory via a...

The vulnerability of the Cscape software arises from overflowing buffers in dynamic memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Cscape software arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Malicious code in babel-lugin-dynamic-i9port-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15795da980aca09e89837d11f5565a68c61e5b779062fae4eb410f3a24bddbc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1404 Malicious code in babel-lugin-dynamic-i9port-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15795da980aca09e89837d11f5565a68c61e5b779062fae4eb410f3a24bddbc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1444 Malicious code in bablpluginsyntaxdynamicimport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c59572f2bc92d923ebe87aeee4cc1ccb84e1e60c29e5f6fbe6a0ca8bda407b8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Downloads function in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code.

The vulnerability of the Downloads function in Microsoft Edge and Google Chrome is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

DEBIAN-CVE-2020-27790

A floating point exception issue was discovered in UPX in PackLinuxElf64::invertptdynamic function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability...

DEBIAN-CVE-2020-27787

A Segmentaation fault was found in UPX in invertptdynamic function in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

UBUNTU-CVE-2020-27790

A floating point exception issue was discovered in UPX in PackLinuxElf64::invertptdynamic function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability...

UPX 数字错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 3.96, which stems from a floating-point exception issue found in the PackLinuxElf64::invertptdynamic function of the plxelf.cpp file, which can be triggered by an attacker with a crafte...

The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook arises from buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the IBM i2 Analyst’s Notebook visual analysis tool arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially created file...

The vulnerability of the compile_lock_unlock() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compilelockunlock function in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2022-2334

The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22...

Softing Secure Integration Server 路径遍历漏洞

Softing Secure Integration Server is a secure integration server from Softing Germany. It provides a powerful OPC UA data integration layer and supports interface abstraction, aggregation, data preprocessing and security supervision. A path traversal vulnerability exists in Softing Secure...

The vulnerability of Microsoft Edge browser, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge relates to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GNU C Library: Multiple Vulnerabilities

Background The GNU C library is the standard C library used by Gentoo Linux systems. It provides programs with basic facilities and interfaces to system calls. ld.so is the dynamic linker which prepares dynamically linked programs for execution by resolving runtime dependencies and related...

NimGetSyscallStub - Get Fresh Syscalls From A Fresh Ntdll.Dll Copy

Get fresh Syscalls from a fresh ntdll.dll copy. This code can be used as an alternative to the already published awesome tools NimlineWhispers and NimlineWhispers2 by @ajpc500 or ParallelNimcalls. The advantage of grabbing Syscalls dynamically is, that the signature of the Stubs is not included i...

F-Secure Atlant 安全漏洞

F-Secure Atlant is a platform from the Finnish company F-Secure for building applications that can scan and detect malicious files. A security vulnerability exists in F-Secure Atlant that stems from a crash in the aerdl.dll component, which causes the scanning engine to crash...

The vulnerability of the PDFium PDF-content processor in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processing component in browsers such as Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...