The vulnerability of the a2p utility, caused by an overflow in the stack buffer, allows a intruder to trigger a service failure or other adverse effects.

The vulnerability of the a2p utility is caused by an overflow of the staticly allocated stack buffer. Exploiting this vulnerability can allow an attacker to cause a service failure or other adverse effects...

VMware vCenter Server Analytics (CEIP) Service File Upload

This module exploits a file upload in VMware vCenter Server's analytics/telemetry CEIP service to write a system crontab and execute shell commands as the root user. Note that CEIP must be enabled for the target to be exploitable by this module. CEIP is enabled by default. Module Options msf use...

Diagnostic State

This module will keep the vehicle in a diagnostic state on rounds by sending tester present packet. Module Options msf use post/hardware/automotive/diagnosticstate msf postdiagnosticstate show actions ...actions... msf postdiagnosticstate set ACTION msf postdiagnosticstate show options ...show an...

Instagram Kids put on hold

Instagram has announced it is pausing the development of its newest brainchild, Instagram Kids—a version of Instagram aimed at 10-12-year-olds, or "tweens". Adam Mosseri, who heads up Instagram, wrote in a blog post about the idea behind Instagram Kids: "We started this project to address an...

Reentrancy in settleAuction(): malicious publisher can bypass index timelock mechanism, inject malicious index, and rug the basket

Handle kenzo Vulnerability details The settleAuction function calls withdrawBounty before setting auctionOngoing = false, thereby allowing reentrancy. Impact A malicious publisher can bypass the index timelock mechanism and publish new index which the basket's users won't have time to respond to...

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from operations that go beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created file, from a remote location...

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from operations that go beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects software for video and dynamic image editing stems from an operation that goes beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from overflowing buffers in the dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects software for video and dynamic image editing stems from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects software for video and dynamic image editing exists due to insufficient testing of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created MP4 file...

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from overflowing buffers in the dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created JPG2000 file...

CVE-2021-28571

Adobe After Effects version 18.1 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

CVE-2021-28571

Adobe After Effects version 18.1 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

Command injection

Adobe After Effects version 18.1 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

CVE-2021-28571

Adobe After Effects is affected by CVE-2021-28571 (and related APSB21-33 advisories) in versions 18.1 and earlier. The issue is a Command Injection vulnerability when After Effects is used with a development/debugging tool for JavaScript scripts, enabling an unauthenticated attacker to achieve ar...

CVE-2021-28571 Adobe After Effects improper neutralization of special elements could lead to remote code execution

Adobe After Effects version 18.1 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

CVE-2021-35994

Adobe After Effects version 18.2.1 and earlier is affected by an out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issu...

CVE-2021-35993

Adobe After Effects version 18.2.1 and earlier is affected by an out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issu...

CVE-2021-36019

Adobe After Effects version 18.2.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this...

CVE-2021-35995

Adobe After Effects version 18.2.1 and earlier is affected by an Improper input validation vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation o...

CVE-2021-35996

Adobe After Effects version 18.2.1 and earlier is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...