Type confusion

An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flbpackmsgpacktojsonformat leads to type confusion bug that interprets whatever is on the stack as msgpack maps and arrays, leading to use-after-free. This can be used by an attacker to craft a specially craft file an...

CVE-2021-46878

An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flbpackmsgpacktojsonformat leads to type confusion bug that interprets whatever is on the stack as msgpack maps and arrays, leading to use-after-free. This can be used by an attacker to craft a specially craft file an...

Fluent Bit 缓冲区错误漏洞

Fluent Bit is an open source log processing and analyzing system written in C. A security vulnerability exists in Treasure Data Fluent Bit version 1.7.1, which stems from the presence of a heap overflow that can be exploited by an attacker to execute arbitrary code on the target system...

PT-2023-12598 · Treasure Data · Treasure Data Fluent Bit

Name of the Vulnerable Software and Affected Versions: Treasure Data Fluent Bit version 1.7.1 Description: An issue was discovered in Treasure Data Fluent Bit, where erroneous parsing in flb pack msgpack to json format leads to a type confusion bug. This bug interprets whatever is on the stack as...

Fluent Bit 安全漏洞

Fluent Bit is an open source log processing and analyzing system written in C. A security vulnerability exists in Treasure Data Fluent Bit version 1.7.1, which stems from the presence of a type-obfuscation error that leads to post-release reuse and can be exploited by an attacker to execute...

PT-2023-12599 · Treasure Data · Treasure Data Fluent Bit

Name of the Vulnerable Software and Affected Versions: Treasure Data Fluent Bit version 1.7.1 Description: An issue was discovered in Treasure Data Fluent Bit, where a wrong variable is used to get the msgpack data, resulting in a heap overflow in flb msgpack gelf value ext. An attacker can craft...

CVE-2021-46878

Treasure Data Fluent Bit 1.7.1 is affected. The vulnerability stems from an error in flb_pack_msgpack_to_json_format that causes type confusion by interpreting stack data as msgpack maps/arrays, leading to use-after-free. This could allow an attacker to craft a specially crafted file and trigger ...

CVE-2021-46879

The CVE-2021-46879 issue affects Treasure Data Fluent Bit 1.7.1. A wrong variable is used when reading msgpack data, causing a heap overflow in flb_msgpack_gelf_value_ext. This can be triggered by a crafted file opened with Fluent Bit, potentially allowing arbitrary code execution on the target s...

CVE-2021-46879

An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flbmsgpackgelfvalueext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute...

CVE-2021-46879

An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flbmsgpackgelfvalueext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute...

treasure-fort.com Cross Site Scripting vulnerability OBB-3170493

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cybercriminals Used Two PoS Malware to Steal Details of Over 167,000 Credit Cards

Two point-of-sale PoS malware variants have been put to use by a threat actor to steal information related to more than 167,000 credit cards from payment terminals. According to Singapore-headquartered cybersecurity company Group-IB, the stolen data dumps could net the operators as much as $3.34...

thailandtreasuretour.com Cross Site Scripting vulnerability OBB-2641808

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

DNF Pocket Android version of Chengdu I Fun Technology Co. Ltd. suffers from denial-of-service vulnerability

DNF Pocket Android is a Dungeons & Dragons game profile search application designed for Android users. There is a denial-of-service vulnerability in DNF Pocket Game Treasure Android version by Chengdu Me Fun Technology Co. An attacker can exploit the vulnerability to cause the program to crash...

Tencent App Store PC version suffers from DLL hijacking vulnerability

Tencent Application Treasure is an application acquisition platform created by Tencent Application Center. A DLL hijacking vulnerability exists in the PC version of Tencent App Store, which can be exploited by attackers to execute malicious code...

DLL Hijacking Vulnerability in App Store

Application Treasure is a mobile application acquisition platform created by Tencent Application Center for smartphone users. Application Treasure suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to load untrusted dynamic link libraries for command execution...

Logic Flaw Vulnerability at Workbot Forgot Password

Work treasure is a mobile collaborative office platform for enterprises developed by Guangdong Jiamei Technology Co. There is a logic flaw vulnerability in WorkPower's forgotten password, which can be exploited by an attacker to reset any user's password and obtain sensitive information...

Application Hijacking Vulnerability in Marketing App

Marketing App is a mobile marketing app for cell phones. There is an application hijacking vulnerability in Marketing Treasure APP, which can be exploited by attackers to obtain sensitive information...

roomersgifts.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-638255 Description| Value ---|--- Affected Website:| roomersgifts.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

treasureyourhealth.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-453626 Description| Value ---|--- Affected Website:| treasureyourhealth.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...