Siemens Siveillance OIS

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Siveillance OIS Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to execute code on...

Uninitalized memory read & leak caused by fuser crate

During creation of new libfuse session with fusesessionnew operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so...

RUSTSEC-2021-0154 Uninitalized memory read & leak caused by fuser crate

During creation of new libfuse session with fusesessionnew operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so...

Use of Uninitialized Resource

Overview fuser is a Filesystem in Userspace FUSE for Rust Affected versions of this package are vulnerable to Use of Uninitialized Resource in the fusesessionnew process when the operation list argument is incorrectly passed as NULL. An attacker can cause uninitialized memory to be read and leake...

PepeAuctionSale Access Control Error Vulnerability

PepeAuctionSale is a DeFi aggregator on Etherscan. An access control error vulnerability exists in PepeAuctionSale, which stems from the fact that the time check operation in PepeAuctionSale 1.0 can be made invalid by assigning a large number to the duration variable, thus affecting access to the...

Squashfs-Tools has an unspecified vulnerability

Squashfs-Tools is an open source package. version 4.5 of Squashfs-Tools contains a security vulnerability that stems from the squashfsopendir function in unsquash-1.c in the software that is responsible for storing the filenames in directory entries, which is then used by unsquashfs to create new...

Out of bounds read in uu_od

An issue was discovered in PartialReader in the uuod crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation...

GHSA-W9VV-Q986-VJ7X Out of bounds read in uu_od

An issue was discovered in PartialReader in the uuod crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation...

GHSA-PPQP-78XX-3R38 Out of bounds write in calamine

An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::setlen is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get...

Use of Uninitialized Resource in truetype

An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::takebytes...

GHSA-4WJ3-P7HJ-CVX8 Double free in ordnung

An issue was discovered in the ordnung crate through version 0.0.1 for Rust. compact::Vec violates memory safety via a remove double free...

GHSA-QR82-2C78-4M8H Reference binding to nullptr in map operations

Impact An attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.Map and tf.rawops.OrderedMap operations: python import tensorflow as tf tf.rawops.MapPeek key=tf.constant8,dtype=tf.int64, indices=, dtypes=tf.int32, capacity=8, memorylimit=128 The implementation...

Wordpress Plugin Simple Events Calendar SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in the...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Gnu Wget

CVE-2017-13089 CVE-2017-13089 的payload 的生成程序，此版本需要手动定位出需要执行的栈的地址 直接是也是有可能成功的 shellcode 部分中 buf 为利用msf生成出的普通payload 直接替换你所需的payload即可 使用方法如下： python shellcode.py&nc -lp 80payload...

ShadowPad Malware is Becoming a Favorite Choice of Chinese Espionage Groups

ShadowPad, an infamous Windows backdoor that allows attackers to download further malicious modules or steal data, has been put to use by five different Chinese threat clusters since 2017. "The adoption of ShadowPad significantly reduces the costs of development and maintenance for threat actors,...

snakeyaml: Billion laughs attack via alias feature

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

PT-2022-3334 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB version 10.7 Description: The issue is related to an out-of-bounds operation in the interceptor memset function, located at /libsanitizer/sanitizer common/sanitizer common interceptors.inc, which can be exploited by a remote attacker ...

China Aims Its Propaganda Firehose at the BBC

The alleged digital operation has deployed hundreds of websites and social media accounts to attack the broadcaster's reporting...

CVE-2021-20758

Cross-site request forgery CSRF vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authentication of administrators and perform an arbitrary operation via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authentication of administrators and perform an arbitrary operation via unspecified vectors...