13092 matches found
Croc Security Breach
croc is a tool from the individual developers at Zack that allows any two computers to simply and securely transfer files and folders. A security vulnerability exists in Croc version 9.6.5 and earlier versions, which stems from a protocol that requires the sender to provide its local IP address...
CVE-2023-26143
Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile API. The library does not sanitize for user input or validate the given file path conforms to a specific schema, nor does it properly pass command-line flags to the git binary using the...
BELL-CVE-2023-4806
Bulletin has no description...
BELL-CVE-2023-4527
Bulletin has no description...
BELL-CVE-2023-43115
Bulletin has no description...
MAL-2023-8149 Malicious code in symbl_ai (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a6d892c350f9034ac4cd7c1670b6b7a31f864e0ef2beeccfd53bb309336396 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2023-28342 · Vyper · Vyper
Name of the Vulnerable Software and Affected Versions: Vyper versions 0.2.9 through 0.3.9 Description: The issue concerns locks of the type @nonreentrant"" or @nonreentrant'' that do not produce reentrancy checks at runtime. This can be mitigated by ensuring the lock name is a non-empty string...
OSV-2023-867 Negative-size-param in http_cb
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62389 Crash type: Negative-size-param Crash state: httpcb fuzz.c...
BELL-CVE-2023-25585
Bulletin has no description...
PT-2023-26680 · Lapce · Lapce
Name of the Vulnerable Software and Affected Versions: Lapce version 0.2.8 Description: A race condition in Lapce allows an attacker to elevate privileges on the system. Recommendations: For Lapce version 0.2.8, at the moment, there is no information about a newer version that contains a fix for...
BELL-CVE-2023-4881
Bulletin has no description...
CVE-2023-4581
Excel .xll add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2...
CVE-2023-4577
When UpdateRegExpStatics attempted to access initialStringHeap it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash. This vulnerability affects Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2...
MAL-2023-8072 Malicious code in ethereum-cryptograph (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6e86c7c831c832fa4741a6ff20a38170abcd90a447a4a1902e53f4bdf06ae96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BELL-CVE-2023-42467
Bulletin has no description...
CVE-2023-41915
OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0...
GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
Exploit Title: GOM Player 2.3.90.5360 - Remote Code Execution RCE Date: 26.08.2023 Author: M. Akil Gündoğan Contact: https://twitter.com/akilgundogan Vendor Homepage: https://www.gomlab.com/gomplayer-media-player/ Software Link: https://cdn.gomlab.com/gretech/player/GOMPLAYERGLOBALSETUPNEW.EXE...
CVE-2023-4781 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873...
SQL Injection
dataease-plugin-common is vulnerable to SQL Injection. The vulnerability exists through the PluginGridSql.xml due to the lack of query validation, allowing an attacker to gain sensitive information via a maliciously crafted string outside the blacklist function...