Design/Logic Flaw

In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206470146...

CVE-2022-20274

In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206470146...

PT-2022-14498 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed...

CVE-2022-20274: Missing Authorization

In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206470146...

Prestashop blockwishlist module 2.1.0 - SQL injection Exploit

Exploit Title: Prestashop blockwishlist module 2.1.0 - SQLi Date: 29/07/22 Exploit Author: Karthik UJ @5up3r541y4n Vendor Homepage: https://www.prestashop.com/en Software Link blockwishlist: https://github.com/PrestaShop/blockwishlist/releases/tag/v2.1.0 Software Link prestashop:...

Server communication timeout error while accessing the vdisk pool after upgrade to 1912 CU5

'Server communication timeout' error while accessing the vdisk pool node in the Citrix Provisioning PVS console after upgrade to 1912 CU5' There were no issues with the other nodes in the PVS Console...

PT-2022-32380

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns a data-race around the sysctl tcp fastopen blackhole timeout in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-32604

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race around the sysctl tcp fastopen blackhole timeout in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-32789

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description The issue concerns a data-race around the sysctl tcp fastopen blackhole timeout in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

What is Citrix ADC TCP retransmit timeout (RTO) value

You may need to know Citrix ADC's TCP retransmit timeout RTO for troubleshooting retransmission issues...

OSV-2022-616 Timeout in JsonFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49401 Crash type: Timeout Crash state: JsonFuzzer...

PT-2022-37118

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash was reported due to a timeout, specifically a JsonFuzzer crash type, as per the OSS-Fuzz report. Recommendations At the moment, there is no...

fastjson2:JsonFuzzer: Timeout in JsonFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=6142534170050560 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Crash State: JsonFuzzer Sanitizer: address ASAN Recommend...

PT-2022-10741 · Undertow · Undertow

Name of the Vulnerable Software and Affected Versions: Undertow versions prior to 2.2.15 Final Description: A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks...

Valinor error messages leading to potential data exfiltration before v0.12.0

php registerConstructorMoney::class, 'fromString' -mapper; try vardump$mapper-mapFoo::class, 'a' = 'HAHA', 'b' = '100 EUR', 'c' = 'USD 100' ; catch MappingError $e $messages = new NodeTraverserfunction Node $node foreach $node-messages as $message vardump '$message', $message-path, $message-body ...

undertow: client side invocation timeout raised when calling over HTTP2

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks...

GO-2022-0233 Resource exhaustion in github.com/pires/go-proxyproto

The PROXY protocol server does not impose a timeout on reading the header from new connections, allowing a malicious client to cause resource exhaustion and a denial of service by opening many connections and sending no data on them. v0.6.0 of the proxyproto package adds support for a user-define...

OESA-2022-1730 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: NFC: netlink: fix sleep in atomic bug when firmware download timeoutCVE-2022-1975 In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalati...

PT-2022-32339

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue concerns a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2022-32034

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.146 through 5.4.197 Description The issue is related to a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...