GHSA-6VG3-HGRW-P5GF SurrealDB has an Authorization Bypass via Composite Record-id Paths

An authenticated user could bypass permission rules that gated access on parts of a record's id — most commonly tenant-isolation rules of the form PERMISSIONS FOR select WHERE id.tenant = $auth.id.tenant. The same defect also let UNIQUE constraints defined on parts of an id admit duplicate entrie...

EUVD-2021-30265

Malicious code in bioql PyPI...

Exploit for CVE-2024-48217

CVE-2024-48217 Sismart Vulnerability ---------------------------...

CVE-2017-16305: Stack-based Buffer Overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16300: Stack-based Buffer Overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

PT-2022-5757 · Mikrotik · Routeros +1

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions prior to stable v7.6 Description: The issue is related to an out-of-bounds read in the snmp process, allowing attackers to execute arbitrary code via a crafted packet. This is due to a buffer overflow vulnerability...

CVE-2021-43327

An issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can extract the security ID key from the device. Then, the protected firmware can be extracted...

Design/Logic Flaw

An issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can extract the security ID key from the device. Then, the protected firmware can be extracted...

CVE-2021-43327

CVE-2021-43327 concerns Renesas RX65/RX65N microcontrollers. The connected sources confirm a hardware fault-based vulnerability where a VCC glitch enables an attacker to extract the device’s security ID key, which then allows access to the protected firmware. The risk is materialized via local fa...

PT-2021-23814 · Renesas · Renesas Rx65

Name of the Vulnerable Software and Affected Versions: Renesas RX65 and RX65N devices affected versions not specified Description: An issue was discovered in Renesas RX65 and RX65N devices, where an attacker can extract the security ID key from the device using a VCC glitch. This allows the...