Fuzzy matching with Ghidra BSim, a guide

TL;DR BSim, Ghidra’s new built-in plugin is a game-changer for reversing firmware and other stripped binaries. Rapidly identify and annotate functions from known libraries. Fuzzy matching works with unknowns, like exact library versions and compiler options. Automatically define custom variable...

MAL-2024-6492 Malicious code in acts-as_fuzzy_search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_fuzzy_search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Fedora: Security Advisory for rust-skim (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for rust-heatseeker (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: rust-skim-0.10.4-4.fc39

Fuzzy Finder in rust!...

[SECURITY] Fedora 39 Update: rust-heatseeker-1.7.1-16.fc39

A fast, robust, and portable fuzzy finder...

Fedora: Security Advisory for rust-heatseeker (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-skim-0.10.4-4.fc40

Fuzzy Finder in rust!...

[SECURITY] Fedora 40 Update: rust-heatseeker-1.7.1-16.fc40

A fast, robust, and portable fuzzy finder...

SQL Injection

org.apache.streampark, streampark is vulnerable to SQL Injection. The vulnerability is due to not sanitizing user input used inside a name-based fuzzy search e.g: job names, role names in some of the pages of the application. An attacker can use illegal parameters for the search leading to SQL...

CVE-2023-30867

In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select from table where jobName like '%jobName%'. However, the jobName field may receive illegal parameters,...

CVE-2023-30867 Apache StreamPark (incubating): Authenticated system users could trigger SQL injection vulnerability

In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select from table where jobName like '%jobName%'. However, the jobName field may receive illegal parameters,...

CVE-2023-30867

CVE-2023-30867 (Apache StreamPark) : The vulnerability arises in the StreamPark platform’s name-based fuzzy search (e.g., jobName or roleName) where input used in a LIKE '%…%' clause is not validated, enabling SQL injection. Multiple sources (NVD, Red Hat, CNVD, Veracode, OSV, GHSA, CVE list) con...

CVE-2023-30867: Improper Neutralization of Special Elements used in an SQL Command

In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select from table where jobName like '%jobName%'. However, the jobName field may receive illegal parameters,...

WithSecure products Security breaches

WithSecure products is a line of security software from the Finnish company WithSecure. A security vulnerability exists in WithSecure Atlant that originates from a potential denial of service when processing certain fuzzy file types and affects the following products and versions: WithSecure Clie...

WithSecure Multiple Product Security Vulnerabilities

WithSecure products are a range of security software from the Finnish company WithSecure. A security vulnerability exists in WithSecure Atlant, which originates from a possible crash of the antivirus engine when scanning for fuzzy PE32 files, affecting the following products and versions:...

Setup of Discovery Connection Azure

By: fuzzy borders Are you having trouble trying to get your Azure assets into your InsightVM security console? In this blog post, we wanted to bring additional insight into leveraging the Azure Discovery Connection with InsightVM. This blog post is brought to you by the Fuzzy Borders project, who...

WithSecure products Security breaches

WithSecure products is a line of security software from the Finnish company WithSecure. A security vulnerability in WithSecure products exists because the antivirus engine may crash when scanning for fuzzy PE32 files, which could be exploited by an attacker to cause a denial of service DoS of the...

WithSecure products Security breaches

WithSecure products is a line of security software from the Finnish company WithSecure. A security vulnerability in WithSecure products exists because the antivirus engine may crash when scanning for fuzzy PE32 files, which could be exploited by an attacker to cause a denial of service DoS of the...