CVE-2021-0614

In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05495528; Issue ID: ALPS05495528...

CVE-2021-0411

In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561362; Issue ID: ALPS05561362...

CVE-2021-0576

In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187236084...

CVE-2020-0321

In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155171907...

CVE-2020-0383

In Parseins of easmdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the media extractor process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2020-0385

In Parseinsh of easmdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2020-0303

In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1482232...

Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking

Logit-based LLM watermarking traces and verifies AI-generated content by maintaining green and red token lists and increasing the likelihood of green tokens during generation. However, it fails in low-entropy scenarios, where predictable outputs make green token selection difficult without...

Exploit for Use After Free in Apple Ipados

iOS "Airborne" Vulnerabilities - Log Artifact Extractor This...

com.deepoove:poi-tl (0.0.3), com.github.kulya:jmeter-gradle-plugin (1.3.4-2.12) +25 more potentially affected by CVE-2025-31672 via org.apache.poi:poi-ooxml (3.11-beta2)

org.apache.poi:poi-ooxml MAVEN version 3.11-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi-ooxml and may be impacted: - com.deepoove:poi-tl 0.0.3 - com.github.kulya:jmeter-gradle-plugin 1.3.4-2.12 -...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.tiff.TiffReader.processIfd

Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=6648584881897472 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...

📄 DataEase 2.4.0 Information Disclosure

DataEase version 2.4.0 suffers from a database configuration information disclosure vulnerability. - Exploit Title: DataEase Database Creds Extractor - Shodan Dork: http.html:"dataease" - FOFA Dork: body="dataease" && title=="DataEase" - Exploit Author: ByteHunter - Email: [email protected] ...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the JsoupHtmlTextExtractor function. An attacker can cause unbounded memory consumption leading to a denial of service by sending crafted HTML content that triggers excessive memory allocation. Details Denial o...

CVE-2024-55504

An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS...

CVE-2024-55504

An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS...

CVE-2024-55504

An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS...

CVE-2024-55504: Improper Control of Generation of Code

An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS...

CVE-2024-55504

RAR Extractor - Unarchiver Free and Pro v.6.4.0 on MacOS is vulnerable to local code injection. The flaw exists in the exploit_combined.dylib component, allowing a local attacker to inject arbitrary code, potentially resulting in remote control and unauthorized access to sensitive user data . A p...

MAL-2025-160 Malicious code in api-extractor-lib1-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adb0d44be0297f3bc8ce73518bf26326d7d8635516dd7e33c4b0d8f0e159054e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-extractor-lib1-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adb0d44be0297f3bc8ce73518bf26326d7d8635516dd7e33c4b0d8f0e159054e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...