PT-2024-40674 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" in the xmlSearchNsByHref function within api.c. Recommendations: At the moment, ther...

Resource Exhaustion

Overview Affected versions of this package are vulnerable to Resource Exhaustion due to a memory leak in the ndr.c component. An attacker can cause a denial of service by exploiting this memory leak to exhaust system resources. Remediation There is no fixed version for krb5. References -...

Memory Leak

Overview Affected versions of this package are vulnerable to Memory Leak due to a memory leak in genmacro.c. Remediation There is no fixed version for yasm. References - Vulnerability Report - Vulnerable Code Credit: LuMingYinDetect...

Authentication Bypass

Amendment This was deemed not a vulnerability. Overview hawk is a library for the HTTP Hawk Authentication Scheme. Affected versions of this package are vulnerable to Authentication Bypass. The incoming client supplied hash of the payload is trusted by the server and not verified before the...

Authentication Bypass

Amendment This was deemed not a vulnerability. Overview PyHawk is a Python libraries for the 'HAWK' HTTP authentication scheme Affected versions of this package are vulnerable to Authentication Bypass. The incoming client supplied hash of the payload is trusted by the server and not verified befo...

Denial of Service (DoS)

Overview images is a Cross-platform image decoderwebp/png/jpeg/gif and encoderwebp/png/jpeg for Node.js Affected versions of this package are vulnerable to Denial of Service DoS due to providing unexpected input types to several different functions. This makes it possible to reach an assert macro...

Improper Check or Handling of Exceptional Conditions

Overview node-twain is an A TWAIN library for nodejs. Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer,...

Command Injection

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to Command Injection through the command execution interface. An attacker can execute arbitrary commands on the server by injecting malicious inputs in...

Authentication Bypass

Overview Affected versions of this package are vulnerable to Authentication Bypass due to the insecure use of strcmp. Remediation There is no fixed version for libjwt. References - Report - Vulnerable Code Credit: P3ngu1nW...

PT-2024-40687 · Fasterxml · Jackson Dataformat Cbor

Name of the Vulnerable Software and Affected Versions: Jackson dataformat CBOR affected versions not specified Description: The issue is related to a security exception in the Jackson dataformat CBOR library. The crash occurs in the java.base/java.util.Arrays.copyOf method, which is called by...

Command Injection

Overview aaptjs is an A node wraper for aapt Affected versions of this package are vulnerable to Command Injection due to improper input sanitization via the add function when using pipe | after the zip file value. PoC js const pkg = require'aaptjs'; pkg.add'test0.zip | touch exploited.txt',...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to the stbigifloadnext function. An attacker can leak internal memory allocation information by triggering an out of bounds memcpy read with a crafted image file. This happens because twoback points to a memory...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the f-vendorlen = char'\0'; function. An attacker can trigger an out-of-bounds write and potentially execute arbitrary code by providing a crafted file. This is only exploitable if len read in startdecoder is a...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the startdecoder function. An attacker can trigger an out-of-buffer write and potentially execute arbitrary code by providing a specially crafted file. This is only exploitable if m-submaps exceeds the array limit...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read when processing ogg vorbis files using the DECODE macro. An attacker can leak internal memory allocation information by crafting a file that triggers an out-of-bounds read when var is negative. Remediation There is no...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in the stbiloadgifmainoutofmem function, an attacker can potentially exploit a double-free condition by using a specially crafted image file. This is only exploitable in a multi-threaded environment and, in the worst case, m...

Out-of-Bounds Write

Overview Affected versions of this package are vulnerable to Out-of-Bounds Write in the f-vendori = get8packetf; function. An attacker can trigger an out-of-bounds write and potentially execute arbitrary code by providing a crafted file. This is due to an integer overflow in setupmalloc where a...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write when processing ogg vorbis files with the f-vendorlen = char'\0'; function. An attacker can trigger an out-of-bounds write by crafting a file that causes the len read in startdecoder to be -1, and len + 1 to become 0...

SQL Injection

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. An attacker can execute arbitrary code by injecting SQL...

SQL Injection

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to SQL Injection through the manipulation of SQL queries. An attacker can execute arbitrary code on the system by injecting malicious SQL commands into...