PT-2021-4920

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 18.4.1 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the...

PT-2021-5028

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 18.4.1 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious MXF file. This could potentially result in arbitrary code execution in the context of...

PT-2021-5027

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 18.4.1 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the context of the...

The vulnerability of the a2p utility, caused by an overflow in the stack buffer, allows a intruder to trigger a service failure or other adverse effects.

The vulnerability of the a2p utility is caused by an overflow of the staticly allocated stack buffer. Exploiting this vulnerability can allow an attacker to cause a service failure or other adverse effects...

Diagnostic State

This module will keep the vehicle in a diagnostic state on rounds by sending tester present packet. Module Options msf use post/hardware/automotive/diagnosticstate msf postdiagnosticstate show actions ...actions... msf postdiagnosticstate set ACTION msf postdiagnosticstate show options ...show an...

Instagram Kids put on hold

Instagram has announced it is pausing the development of its newest brainchild, Instagram Kids—a version of Instagram aimed at 10-12-year-olds, or "tweens". Adam Mosseri, who heads up Instagram, wrote in a blog post about the idea behind Instagram Kids: "We started this project to address an...

CVE-2021-29365: Loop with Unreachable Exit Condition

Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCropW component. This can cause a denial of service DOS...

PT-2021-18185

Name of the Vulnerable Software and Affected Versions: Irfanview version 4.57 Description: The issue is related to an infinite loop that occurs when processing a crafted BMP file in the EFFECTS!AutoCrop W component, leading to a denial of service DOS. Recommendations: For Irfanview version 4.57,...

VMware vCenter Server Analytics (CEIP) Service File Upload

This module exploits a file upload in VMware vCenter Server's analytics/telemetry CEIP service to write a system crontab and execute shell commands as the root user. Note that CEIP must be enabled for the target to be exploitable by this module. CEIP is enabled by default. Module Options msf use...

Reentrancy in settleAuction(): malicious publisher can bypass index timelock mechanism, inject malicious index, and rug the basket

Handle kenzo Vulnerability details The settleAuction function calls withdrawBounty before setting auctionOngoing = false, thereby allowing reentrancy. Impact A malicious publisher can bypass the index timelock mechanism and publish new index which the basket's users won't have time to respond to...

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from overflowing buffers in the dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects software for video and dynamic image editing stems from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from operations that go beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects software for video and dynamic image editing stems from an operation that goes beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from operations that go beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created file, from a remote location...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects software for video and dynamic image editing exists due to insufficient testing of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created MP4 file...

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from overflowing buffers in the dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created JPG2000 file...

CVE-2021-28571

Adobe After Effects version 18.1 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

CVE-2021-28571

Adobe After Effects version 18.1 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

Command injection

Adobe After Effects version 18.1 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

CVE-2021-28571

Adobe After Effects is affected by CVE-2021-28571 (and related APSB21-33 advisories) in versions 18.1 and earlier. The issue is a Command Injection vulnerability when After Effects is used with a development/debugging tool for JavaScript scripts, enabling an unauthenticated attacker to achieve ar...

CVE-2021-28571 Adobe After Effects improper neutralization of special elements could lead to remote code execution

Adobe After Effects version 18.1 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...