MAL-2022-6583 Malicious code in tiny-range-binarysearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1758f192df4854a2d7a5d26e16947cada8a23b6fad83735982f1207b13752357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-37494

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.150-00001-gdc8dcf942daa Description A use-after-free UAF vulnerability exists within the binder component of the Linux kernel. The vulnerability occurs due to a race condition between binder update page rang...

CVE-2022-23071

In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery SSRF, in the “Import Recipe” functionality. When an attacker enters the localhost URL, a low privileged attacker can access/read the internal file system to access sensitive information...

a2 (>=0.2.0, <=0.3.6), abc (>=0.1.0, <=0.2.3) +502 more potentially affected by unknown CVE via crossbeam (>=0.1.6, <=0.6.0)

crossbeam CARGO version =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.2.0, =0.11.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.7.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8GJ8-HV75-GP94...

CVE-2022-30325

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. The device default pre-shared key for both 2.4 GHz and 5 GHz networks can be guessed or brute-forced by an attacker...

DEBIAN-CVE-2022-32545

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...

DEBIAN-CVE-2022-32546

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...

Input validation

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1856)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1880)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Imagemagick Studio ImageMagick 输入验证错误漏洞

Imagemagick Studio ImageMagick is a suite of open-source image processing software from the American company Imagemagick Studio. The software can read, convert, or write images in a variety of formats. A security vulnerability exists in Imagemagick Studio ImageMagick that originates when handling...

CVE-2021-41418

AriaNg v0.1.0v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors' access rights...

CVE-2021-41418

AriaNg v0.1.0v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors' access rights...

CLSA-2022-1655320860 Fixed CVEs in vim: CVE-2022-1927, CVE-2022-1897

CVE-2022-1897: fix substitution which overwrites an allocated buffer - CVE-2022-1927: fix invalid cursor position after '0;' range...

CLSA-2022-1655317609 Fixed CVEs in vim: CVE-2022-1897, CVE-2022-1927

CVE-2022-1897: fix substitution which overwrites an allocated buffer - CVE-2022-1927: fix invalid cursor position after '0;' range...

ABB Drive Composer 后置链接漏洞

ABB Drive Composer is a 32-bit Windows application from ABB Switzerland. It is used to commission and maintain ABB Common Architecture drives. A security vulnerability exists in ABB Drive Composer that originates from a vulnerability that allows a low-privileged attacker to create and write files...

PT-2022-11394 · Ariang · Ariang

Name of the Vulnerable Software and Affected Versions: AriaNg versions 0.1.0 through 1.2.2 Description: The issue is related to incorrect access control, where the system fails to authenticate visitors' access rights, potentially allowing unauthorized access. Recommendations: For versions 0.1.0...

Google kCTF Access Control Error Vulnerability

Google kCTF is a Kubernetes-based CTF competition infrastructure from Google Google. kCTF v1.6.0 prior to the release of Google kCTF has an access control error vulnerability, which stems from the existence of improper access control in the kctf cluster, which can be exploited by attackers to...

The vulnerability of the asynchronous Moxa NPort 5110 server, related to the possibility of recording outside the allowed range, allows a intruder to trigger a service failure.

The vulnerability of the asynchronous Moxa NPort 5110 server lies in its ability to record data beyond the allowed range. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the asynchronous Moxa NPort 5110 server lies in its ability to write data beyond the allowed range, allowing an attacker to restrict access to certain values in memory.

The vulnerability of the asynchronous Moxa NPort 5110 server lies in its ability to write data beyond the allowed range. Exploiting this vulnerability allows a malicious actor to restrict access to certain values in memory...