PT-2022-28627

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.4.180 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28568

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.303 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-7630 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.0-rc1-00233-g9a20c48d1ed2 Description: The issue is related to the riscv component of the Linux kernel, where the trace hardirqs on,off functions require the caller to set up the frame pointer properly. If...

CVE-2022-0696

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428...

CRLF Injection

microweber/microweber is vulnerable to CRLF Injection. Lack of filtering CRLF characters in redirectUrl allows an attacker to cause stack trace exposure...

suricata:fuzz_sigpcap_aware: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4854539382030336 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzerubsansuricata Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

CRLF Injection in microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

GHSA-3WWJ-WH2W-G4XP CRLF Injection in microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0666

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0666

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

Crlf injection

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0666

CVE-2022-0666 affects microweber/microweber prior to 1.2.11. The vulnerability is a CRLF Injection caused by lack of filtering in redirects (notably the redirect_to/redirectUrl path), leading to stack trace exposure. Nuclei and Veracode listings corroborate the issue and note potential impact suc...

CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0666

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

PT-2022-13344

Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.11 Description The issue is related to CRLF Injection, which leads to Stack Trace Exposure due to a lack of filtering. This occurs at the endpoint https://demo.microweber.org/. Recommendations For...

CVE-2022-0666: Improper Neutralization of CRLF Sequences

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/

Description The Introduction of a New Line Character lets the attacker the stack trace at demo.microweber.org/ This Attack becomes more significant because of its Less complication. The Stack trace discloses following information : 1. Backend Response code. 2. The Versions of Backend Laravel...

Information Disclosure

IBM MQ is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization of output data within trace files...

Information Disclosure

IBM MQ is vulnerable to information disclosure. An attacker is able to exploit the vulnerability by including sensitive data within trace...

CVE-2022-21226

Out-of-bounds read in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access...