PYSEC-2022-151

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior...

CVE-2022-23587 Integer overflow in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior...

PT-2022-16104 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier Description: The Grappler component of TensorFlow is vulnerable to an integer overflow during...

Unhandled reverts from Cosmos to Eth batches can cause *Denial Of Service*

Handle hack3r-0m Vulnerability details At the above-mentioned places in Gravity contract, it makes external call to a function to transfer erc20 token. This can cause revert in cases where erc20 safeTransfer fails for e.g erc20 contract has blacklisted address of gravity contract to alllow...

CVE-2021-0562

In RasterIntraUpdate of motionest.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

PUB-A-176084648

In RasterIntraUpdate of motionest.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Additional Information on Cost Estimation in Veeam Backup for Google Cloud

Challenge The cost estimation feature allows you to approximately estimate the costs of Google Cloud resources required to run data protection operations for a backup policy. You can obtain granular information on how much costs running the policy will incur, with an option to export the estimati...

CVE-2020-15350

RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64decode uses an output buffer estimation function to compute the required buffer capacity and validate against the provided buffer size. The base64estimatedecodesize function calculates the expected decoded size...

Buffer overflow

RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64decode uses an output buffer estimation function to compute the required buffer capacity and validate against the provided buffer size. The base64estimatedecodesize function calculates the expected decoded size...

Buffer overflow

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Depot...

Sherloq - An Open-Source Digital Image Forensic Toolset

An open source image forensic toolset Introduction "Forensic ImageAnalysis is the application of image science and domain expertise to interpret the content of an image and/or the image itself in legal matters. Major subdisciplines of Forensic Image Analysis with law enforcement applications...

Additional Information on “Cost Estimation” in Veeam Backup for AWS

Related User Guide Page This KB article provides additional information to the following pages: Creating EC2 Backup Policies Step 9. Review Estimated Cost Creating RDS Backup Policies Step 9. Review Estimated Cost Challenge Cost Estimation provides the administrator feedback on estimates of AWS...

Theo - Ethereum Recon And Exploitation Tool

Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a smart contract. Transaction pool monitor. Web3 console Frontrunning and backrunning...

A week in security (February 11 – 17)

Last week on Malwarebytes Labs we discussed the return of the Sextortion Bitcoin scams, we gave you an early overview of the exploit kits in the winter of 2019, we talked about the destruction of VFEmail service, for consumers we discussed whether you should remove yourself from social media, for...

WordPress WP Cost Estimation plugin < 9.660 - Upload Directory Traversal vulnerability

Upload Directory Traversal vulnerability found by Wordfence in WordPress WP Cost Estimation plugin versions 9.660. Solution All versions older than version 9.660 are vulnerable, update to the latest version at least 9.660...

WordPress WP Cost Estimation plugin < 9.644 - Arbitrary File Upload and Delete vulnerability

Arbitrary File Upload and Delete vulnerability found by Wordfence in WordPress WP Cost Estimation versions 9.644. Solution All versions older than 9.644 vulnerable and you should update to the latest available version at least to 9.644...

WP Cost Estimation < 9.660 - Upload Directory Traversal

The WPEstimationForm WordPress plugin was affected by an Upload Directory Traversal security vulnerability...

WP Cost Estimation < 9.644 - Arbitrary File Upload and Delete

The WPEstimationForm WordPress plugin was affected by an Arbitrary File Upload and Delete security vulnerability...

Widespread Malvertising Campaign Hijacks 300 Million Sessions

A massive malvertising campaign targeting iOS devices hijacked a whopping 300 million browser sessions in just 48 hours. Researchers at Confiant recorded the campaign Nov. 12, and said that the threat actor behind the campaign is still active to this day. A malicious landing page According to...

GraphicsMagick -- SVG/Rendering vulnerability

GraphicsMagick News: Fix heap write overflow of PrimitiveInfo and PointInfo arrays. This is another manefestation of CVE-2016-2317, which should finally be fixed correctly due to active detection/correction of pending overflow rather than using estimation...