UBUNTU-CVE-2022-24773

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS1 v1.5 signature verification code does not properly check DigestInfo for a proper ASN.1 structure. This can lead to successful verification with signatures that...

UBUNTU-CVE-2022-24772

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a DigestInfo ASN.1 structure. This can allow padding bytes to be removed an...

PT-2022-29200

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.270 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-29155

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.183 Description A potential security issue exists in the mac80211 hwsim component, related to the initialization of ieee80211 tx info at hw scan work. The actual impact and attack plausibility have not yet...

PT-2022-29219

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.305 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-29064

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.27 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-16869

Name of the Vulnerable Software and Affected Versions node-forge versions prior to 1.3.0 Description The issue concerns the RSA PKCS1 v1.5 signature verification code in node-forge, which does not properly check DigestInfo for a proper ASN.1 structure. This can lead to successful verification wit...

PT-2022-28995

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.13 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-29180

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.233 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-29119

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.104 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

CVE-2021-39792

In usbgadgetgivebackrequest of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2022-16732 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is a heap-based buffer overflow in the SFS AddString function at bifs/script dec.c. This is a general information about the problem, but details about the estimated number of potentially affected...

Nextcloud Information Disclosure Vulnerability (CNVD-2022-20155)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication applications platform from Nextcloud Germany.A security vulnerability exists in Nextcloud Server, which is due to an issue with the Nextcloud Text application which is provided with Nextcloud Server by...

Nivistealer - Steal Victim Images Exact Location Device Info And Much More

Steal Victim Images Exact Location Device Info And Much More Features of Nivi-Stealer: Steal Ip Steal Device Info Uses Device Gps to steal exact location Steal pic from front camera Send logs to discord also save them locally in a txt file Works on android,windows,linux,mac os Uses iframe to load...

Microweber has a vulnerability regarding input validation.

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An integer overflow vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from the fact tha...

CVE-2022-25557

Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the urls parameter...

CVE-2022-25550

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the deviceName parameter...

Xxe

Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...

CVE-2021-44632

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/upgradeinfo feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

CVE-2021-44632

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/upgradeinfo feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...