PT-2022-37002

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read. Technical details include a crash state involving functions such as pdfi dict get no store R inner, pd...

PT-2022-4858

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a Use After Free vulnerability in the Vim text editor, specifically with the find pattern in path function. This vulnerability allows a remote attacker to access confidential data,...

PT-2025-8366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak was found in the icp opal init function. The of find compatible node function returns a node pointer with refcount incremented, and use of node put on it when done...

How iPhones can run malware even when they’re off

Most people think that turning off their iPhone - or letting the battery die - means that the phone is, well, off. The thing is, this isnt quite true. In reality, most of the phones functionality has ended, but there are components that mindlessly continue a zombie-like existence, for the most pa...

Your iPhone Is Vulnerable to a Malware Attack Even When It’s Off

Researchers found a way to exploit the tech that enables Apple’s Find My feature, which could allow attackers to track location when a device is powered down...

AirTag stalking: What is it, and how can I avoid it?

More voices are being raised against the use of everyday technology repurposed to attack and stalk people. Most recently, its reported that Ohio has proposed a new bill in relation to electronic tagging devices. The bill, aimed at making short work of a loophole allowing people with no stalking o...

Heap buffer overflow in vim_strncpy find_word in vim/vim

...

Buffer Over-read in function find_next_quote in vim/vim

...

Attackers can Install Malware on iPhone When it is Powered Off – Research

By Deeba Ahmed The iOS Find My feature has a safety loophole that can lead to infecting the iPhone even if… This is a post from HackRead.com Read the original post: Attackers can Install Malware on iPhone When it is Powered Off - Research...

Researchers Find Potential Way to Run Malware on iPhone Even When it's OFF

A first-of-its-kind security analysis of iOS Find My function has identified a novel attack surface that makes it possible to tamper with the firmware and load malware onto a Bluetooth chip that's executed while an iPhone is "off." The mechanism takes advantage of the fact that wireless chips...

PT-2022-2732

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4979 Description The issue is related to a Use After Free error in the Vim text editor. This error is associated with the find pattern in path function and involves the use of memory after it has been freed...

GHSA-CCMR-QJ26-845G Improper Restriction of XML External Entity Reference in Elasticsearch

Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's findfilestructure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager then an attacker could send a specially crafted request capable of leaking content ...

PT-2022-2606

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2 Description The issue is related to a segmentation violation via the njs lvlhsh bucket find function at njs lvlhsh.c in the Nginx NJS interpreter. This can lead to an uncontrolled resource consumption, potentially...

ALPINE-CVE-2022-1629

Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution...

DEBIAN-CVE-2022-1629

Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution...

UBUNTU-CVE-2022-1629

Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution...

ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find()

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 8.2.4925 that stems from a buffer over-read in the findnextquote function, which can lead to a software crash, memory modification, and remote execution...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in Vim prior to version 8.2.4919, which stems from a vimstrncpy findword heap buffer overflow, which can cause software crashes, bypass protection mechanisms, modify memory, and remote execution...

PT-2022-2731

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4925 Description The issue is related to a buffer over-read in the find next quote function, which can cause the operation to exceed the buffer boundaries in memory. Exploitation of this issue may allow an attacker to...