The vulnerability of the pp_select() function in the Perl interpreter allows a hacker to cause a service failure.

The vulnerability of the ppselect function in the Perl interpreter is related to incorrect cleanup of the global PLDEFOUT variable. Exploiting this vulnerability could allow an attacker to cause a service failure...

Python Exec, Python Pingback, Reverse TCP (via python)

Execute a Python payload from a command. Connects back to the attacker, sends a UUID, then terminates Module Options msf use payload/cmd/windows/python/pingbackreversetcp msf payloadpingbackreversetcp show actions ...actions... msf payloadpingbackreversetcp set ACTION msf payloadpingbackreversetc...

EulerOS Virtualization 3.0.2.6 : binutils (EulerOS-SA-2023-1092)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reorderi...

[SECURITY] Fedora 37 Update: mujs-1.3.2-1.fc37

MuJS is a lightweight Javascript interpreter designed for embedding in other software to extend them with scripting capabilities...

Fedora: Security Advisory for mujs (FEDORA-2022-c4b56e4400)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: python3.11-3.11.1-1.fc36

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

jLEMS 路径遍历漏洞

jLEMS is a Java interpreter open-sourced by LEMS. A path traversal vulnerability exists in jLEMS. An attacker could exploit this vulnerability to obtain sensitive information in a directory folder...

wabt:read_binary_interp_fuzzer: Crash in void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5491104827179008 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: readbinaryinterpfuzzer Job Type: libfuzzerubsanwabt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000008d85...

The vulnerability of the command interpreter in Moxa EDR-810, EDR-G902, EDR-G903, TN-4900, and TN-5916 router microprogramming devices allows attackers to execute arbitrary code.

The vulnerability of the command interpreter in Moxa EDR-810, EDR-G902, EDR-G903, TN-4900, and TN-5916 microprogrammed service routers stems from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HTTP/HTT...

PT-2022-5680 · Moxa · Moxa Edr-G903 +4

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 versions affected versions not specified Moxa EDR-G902 versions affected versions not specified Moxa EDR-G903 versions affected versions not specified Moxa TN-4900 versions affected versions not specified Moxa TN-5916 versions...

[SECURITY] [DSA 5291-1] mujs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5291-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 28, 2022 https://www.debian.org/security/faq -...

The vulnerability of the command interpreter in Moxa’s TN-5916 microprogrammed router web service allows a hacker to execute arbitrary code.

The vulnerability of the command interpreter in Moxa’s TN-5916 microprogrammed router service software is related to errors during the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the command interpreter in Moxa EDR-810, EDR-G902, EDR-G903, and TN-4900 router software allows a perpetrator to execute arbitrary code.

The vulnerability of the command interpreter in Moxa EDR-810, EDR-G902, EDR-G903, and TN-4900 router software-based web services is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GPL Ghostscript: Multiple Vulnerabilities

Background Ghostscript is an interpreter for the PostScript language and for PDF. Description Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workarou...

py-tflite -- buffer overflow vulnerability

Thibaut Goetghebuer-Planchon reports: The reference kernel of the CONV3DTRANSPOSE TensorFlow Lite operator wrongly increments the dataptr when adding the bias to the result. Instead of dataptr += numchannels; it should be dataptr += outputnumchannels; as if the number of input channels is differe...

CVE-2022-41894

TensorFlow is an open source platform for machine learning. The reference kernel of the CONV3DTRANSPOSE TensorFlow Lite operator wrongly increments the dataptr when adding the bias to the result. Instead of dataptr += numchannels; it should be dataptr += outputnumchannels; as if the number of inp...

Buffer overflow

TensorFlow is an open source platform for machine learning. The reference kernel of the CONV3DTRANSPOSE TensorFlow Lite operator wrongly increments the dataptr when adding the bias to the result. Instead of dataptr += numchannels; it should be dataptr += outputnumchannels; as if the number of inp...

CVE-2022-41894 Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite

TensorFlow is an open source platform for machine learning. The reference kernel of the CONV3DTRANSPOSE TensorFlow Lite operator wrongly increments the dataptr when adding the bias to the result. Instead of dataptr += numchannels; it should be dataptr += outputnumchannels; as if the number of inp...

[SECURITY] Fedora 36 Update: python3-docs-3.10.8-1.fc36

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

CVE-2022-40797

Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDENUPLOADS value in conf.json only blocks .php, .php4, and .php5 files. Visiting any .phar file invokes the PHP interpreter in some realistic web-server configurations...