PT-2022-25431 · Crafter Cms · Crafter Studio

Name of the Vulnerable Software and Affected Versions: Crafter Studio of Crafter CMS affected versions not specified Description: The issue allows authenticated developers to execute OS commands via FreeMarker SSTI due to improper control of dynamically-managed code resources. Recommendations: At...

Honeywell SoftMaster 代码问题漏洞

Honeywell SoftMaster is a software program from Honeywell USA. Honeywell SoftMaster suffers from a code issue vulnerability that stems from the fact that if an attacker manages to trick a valid user into loading a malicious DLL, then the attacker can execute code within the context and privileges...

SAMSUNG Smart Switch PC 代码问题漏洞

SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. SAMSUNG Smart Switch PC suffers from a DLL hijacking vulnerability that originates when a process attempts to load a DLL without specifying the absolute path to the DLL. An attacker can exploit...

The vulnerability of the performance optimization tool of the HP Performance Tune-up software, a software solution for automated support and driver updates by HP Support Assistant, allows a hacker to execute arbitrary code.

The vulnerability of the HP Performance Tune-up performance optimization tool, a software solution for automated support and driver updates by HP Support Assistant, lies in the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PT-2022-25035 · Samsung · Smart Switch Pc

Name of the Vulnerable Software and Affected Versions: Smart Switch PC versions prior to 4.3.22083 3 Description: The issue allows an attacker to execute arbitrary code through a DLL hijacking vulnerability. Recommendations: For versions prior to 4.3.22083 3, update to version 4.3.22083 3 or late...

CVE-2022-36403

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary code.

The vulnerability of the NPM packet manager’s vm2 library is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

GHSA-GWC9-M7RH-J2WW vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, k3d, kubeflow-fips, kubeflow...

GHSA-GWC9-M7RH-J2WW vulnerabilities

Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, k3d, terraform-provider-sendgrid...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, k3d, grpcurl, wireguard-go, hey, terraform-provider-sendgrid, kubeflow-katib, kubeflow...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kubeflow-katib, hey, grpcurl, kube-state-metrics, terraform-provider-sendgrid-fips, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, wireguard-go, kubeflow, kubeflow-fips, k3d...

Outbyte PC Repair 代码问题漏洞

Outbyte PC Repair is a comprehensive computer repair tool from Outbyte. Designed to solve a range of different system problems, clean up drives, optimize performance and improve your privacy and security. A security vulnerability exists in Outbyte PC Repair Installation File version 1.7.112.7856,...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, k3d, grpcurl, wireguard-go, hey, terraform-provider-sendgrid, kubeflow-katib, kubeflow...

CVE-2022-28884

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kubeflow-katib, hey, grpcurl, kube-state-metrics, terraform-provider-sendgrid-fips, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, wireguard-go, kubeflow, kubeflow-fips, k3d...

CVE-2021-43565 vulnerabilities

Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, k3d, terraform-provider-sendgrid...

CVE-2021-43565 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, k3d, kubeflow-fips, kubeflow...

PT-2022-5016 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: Rizin versions 0.4.0 and prior Description: The issue is related to an out-of-bounds write when getting data from dyld cache files. A user opening a malicious dyld cache file could be affected, allowing an attacker to execute code on the user...

Rizin 缓冲区错误漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A buffer error vulnerability...