PT-2022-38157

Уязвимость функции vmbus device register модуля drivers/hv/vmbus drv.c драйвера поддержки гостевого режима Microsoft HyperV ядра операционной системы Linux связана с некорректной инициализацией. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Constructor cannot be used in upgradeable contracts

Lines of code Vulnerability details Details As per OpenZeppelin’s documentation, “Due to a requirement of the proxy-based upgradeability system, no constructors can be used in upgradeable contracts.” reason being “the code within a logic contract’s constructor will never be executed in the contex...

PT-2022-2219

Name of the Vulnerable Software and Affected Versions libsndfile affected versions not specified Description The issue is related to the psf binheader readf function in the libsndfile library, which is used for reading and writing audio files. The problem arises from errors during variable...

Microsoft Win32k Privilege Escalation Vulnerability

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges...

CLSA-2022-1648067859 Fix of CVE: CVE-2022-0847

lib/ioviter: initialize "flags" in new pipebuffer Max Kellermann CVE-2022-0847...

CVE-2021-27426 GE UR family insecure default variable initialization

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user...

CVE-2021-27426: Insecure Default Variable Initialization

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user...

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847 PoC Usage dirty-pipe CVE-20...

PT-2025-8000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition issue exists due to the exposure of GPIO chip irq members before they are fully initialized. This can lead to a kernel NULL pointer dereference, as observed with the...

Exploit for Improper Initialization in Linux Linux_Kernel

pwncatdirtypipe !asciicasthttps://asciinema.org/a/UGXf1HI...

CVE-2022-22657

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

CVE-2022-22657

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

CVE-2022-22657: Improper Initialization

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

Intel CPU vulnerability CVE-2021-0119

Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via physical access. CVE-2021-0119 Impact An attacker may be able to exploit the Intel processor firmware to gain elevated access to resources. The followin...

CVE-2021-39718

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...

ALBA-2022:0883 cloud-init bug fix and enhancement update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Bug Fixes and Enhancements: AlmaLinux8 Azure cloud-init fails to configure the...

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847 POC Source: https://www.exploit-db.com/exploi...

Exploit for Improper Initialization in Linux Linux_Kernel

Dirty Pipe POC CVE-2022-0847 POC - https://dirtypipe.cm4all.co...

kernel: improper initialization of the "flags" member of the new pipe_buffer

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copypagetoiterpipe and pushpipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cach...

PT-2022-15605

Name of the Vulnerable Software and Affected Versions Logic Pro versions prior to 10.7.3 GarageBand versions prior to 10.4.6 macOS Monterey versions prior to 12.3 Description A memory initialization issue was addressed with improved memory handling. This issue may lead to unexpected application...