2341 matches found
CVE-2020-22122: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...
PT-2021-5773
Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22 Description The issue is related to an out-of-bounds read in the ntfs attr find in attrdef function of the NTFS-3G file system driver. This can be triggered by a crafted NTFS image, allowing an attacker to...
PT-2021-5759
Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22 Description The issue is related to out-of-bounds reads in the ntfs attr find and ntfs external attr find functions of the NTFS-3G driver. This can be exploited by a crafted NTFS image, potentially allowing ...
Fedora: Security Advisory for rust-sd (FEDORA-2021-0f82e9d6d5)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2021-18882
Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 Description A permissions issue was addressed with improved validation. A malicious application may be able to access Find My data. Recommendations For iOS versions prior to 14.7, update to iOS 14.7 to resolve the...
iPadOS 访问控制错误漏洞
Apple iPadOS is an operating system for the iPad tablet computer from Apple USA. An access control error vulnerability exists in iPadOS due to improper access restrictions. A native application can bypass the implemented security restrictions and gain unauthorized access to Find My Data. The...
Ipa-Medit - Memory Search And Patch Tool For Resigned Ipa Without Jailbreak
Ipa-medit is a memory search and patch tool for resigned ipa without jailbreak. It was created for mobile game security testing. Motivation Memory modification is the easiest way to cheat in games, it is one of the items to be checked in the security test. There are also cheat tools that can be...
PT-2021-6710 · Gifsicle +2 · Gifsicle +2
Name of the Vulnerable Software and Affected Versions: gifsicle version 1.92 Description: The issue is related to a NULL pointer dereference in the find color or error function. This can be exploited by a remote attacker to cause a denial of service. Recommendations: For gifsicle version 1.92,...
PT-2021-28329
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read error. The crash state indicates involvement of functions such as sc asn1 read tag, sc asn1 find tag...
PT-2021-29257
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.10 Description The issue is related to a potential read overflow in the find file option function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2021-29228
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.43 Description The issue concerns a read overflow in the find file option function. It was introduced in version v5.8 and fixed in version v5.10.43. The actual impact and attack plausibility have not yet be...
PT-2021-25234
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.43 Description The issue is related to a potential read overflow in the find file option function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...
PT-2021-25263
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.10 Description: The issue is related to a potential read overflow in the find file option function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
Apple's Find My Network Can be Abused to Exfiltrate Data From Nearby Devices
Latest research has demonstrated a new exploit that enables arbitrary data to be uploaded from devices that are not connected to the Internet by simply sending "Find My" Bluetooth broadcasts to nearby Apple devices. "It's possible to upload arbitrary data from non-internet-connected devices by...
GHSA-2RVV-W9R2-RG7M Information Disclosure in Apache Tomcat
When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpected behaviour of...
Apple’s ‘Find My’ Network Exploited via Bluetooth
Apple’s “Find My device” function for helping people track their iOS and macOS devices can be exploited to transfer data to and from random passing devices without using the internet, a security researcher has demonstrated. Security researcher Fabian Bräunlein with Positive Security developed a...
OPPO Find x has an information leakage vulnerability
OPPO Find x is a smartphone launched by OPPO Guangdong Mobile Communication Co. OPPO Find x suffers from an information leakage vulnerability. An attacker can utilize a malicious APP to listen to the user's call content through this exposed component by simply applying for the commonly used...
PT-2024-11090 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc1-custom 1 Description: The issue is caused by a race condition between truncate and overwrite operations in the f2fs compress functionality. This can lead to a situation where a page is detached from t...
