CVE-2021-42735

Adobe Photoshop version 22.5.1 and earlier versions is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42735 Adobe Photoshop Memory Corruption could lead to Arbitrary code execution

Adobe Photoshop version 22.5.1 and earlier versions is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-40727

Access of Memory Location After End of Buffer CWE-788...

CVE-2021-42732

Access of Memory Location After End of Buffer CWE-788...

Buffer overflow

Access of Memory Location After End of Buffer CWE-788...

CVE-2021-42732 Adobe InDesign crashes when parsing the GIF file

Access of Memory Location After End of Buffer CWE-788...

CVE-2021-42732

CVE-2021-42732 is linked to Adobe InDesign and is described as Access of Memory Location After End of Buffer (CWE-788). Connected documents indicate this issue is part of the APSB21-107 advisory affecting InDesign versions prior to 17.0.0 (notably 16.x and earlier). The CVSSv3.1 data from the NVD...

CVE-2021-40727

Adobe InDesign (Windows/macOS) versions prior to 16.4.0 are affected by CVE-2021-40727 (Access of Memory Location After End of Buffer) as part of APSB21-73. The issue, triggered during parsing of TIFF input, is described across multiple third‑party advisories as a boundary/overflow condition that...

CVE-2021-40727 Adobe InDesign crashes when parsing the TIF file

Access of Memory Location After End of Buffer CWE-788...

Adobe Media Encoder Multiple Arbitrary Code Execution Vulnerability (APSB21-70) - Windows

Adobe Media Encoder is prone to Arbitrary Code Execution vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

Researchers Find Bluetooth Signals Can be Fingerprinted to Track Smartphones

A new research undertaken by a group of academics from the University of California San Diego has revealed for the first time that Bluetooth signals can be fingerprinted to track smartphones and therefore, individuals. The identification, at its core, hinges on imperfections in the Bluetooth...

Coffee app in hot water for constant tracking of user location

A mobile app violated Canadas privacy laws via some pretty significant overreach with its tracking of device owners. The violation will apparently not bring the app owners, Tim Hortons, any form of punishment. However, the fallout from this incident may hopefully serve as a warning to others with...

CVE-2022-1935

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker already in possession of a valid Project Trigger Token to misuse it from any location even when I...

Your Tim Hortons Coffee App Knew Where You Were at All Times

The Canada-based company illegally collected “vast amounts of location data,” such as every time a person entered or left their home, workplace, or another coffee shop...

CVE-2022-30514

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:126...

Flower Delivery by Florist One <= 3.5.15 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setups PoC As admin, go to the plugin's settings, create a ne...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5458-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5458-1 advisory. It was discovered that Vim was incorrectly handling virtual column position operations, which could result in an out-of-bounds read. An attacker could...

Ransomware-Simulator - Ransomware Simulator Written In Golang

The goal of this repository is to provide a simple, harmless way to check your AV's protection on ransomware. This tool simulates typical ransomware behaviour, such as: Staging from a Word document macro Deleting Volume Shadow Copies Encrypting documents embedded and dropped by the simulator into...

CVE-2022-26725

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. Photo location information may persist after it is removed with Preview Inspector...

CVE-2022-26725

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. Photo location information may persist after it is removed with Preview Inspector...