sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::enable_if<true, apfs_omap_key const*>::type APFSBtreeNode<apfs_omap_ke

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5785312956645376 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-use-after-free in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSJObjBtreeNode>::

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5594044976726016 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4864418583281664 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cras...

PT-2021-28346

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves residual coding, read transform unit, and read transform tre...

CVE-2020-20211

Mikrotik RouterOs 6.44.5 long-term tree suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet...

PT-2021-12045 · Unknown · Uwebsockets

Name of the Vulnerable Software and Affected Versions: uWebSockets versions 18.11.0 through 18.12.0 Description: The issue is related to a stack-based buffer overflow in the uWS::TopicTree::trimTree function, which is called from uWS::TopicTree::unsubscribeAll. The vendor disputes the severity of...

Tree Sitemap WordPress Code Execution

The vulnerability of the cppluginsdobuttonjoblatercallback function in the Tree Sitemap WordPress plugin is related to authentication process errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

@21epub/resource-lib (>=1.0.0, <=1.0.3), @2fn/helpers (>=1.0.0, <=1.0.1) +3163 more potentially affected by CVE-2021-32723 via prismjs (>=1.2.0, <=1.23.0)

prismjs NPM version =1.2.0, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @adebawo-damilare/esm-reports-app 5.2.0 - @admin-bro/design-system 1.4.0 - @afzalh/aug07 1.1.2 and more Source cves: CVE-2021-32723 Source...

WS-2021-0160

In authelia, versions v4.0.0 to v4.1.0 are vulnerable against LDAP injection as a result of failing to properly sanitize user input. It’s possible to modify LDAP statements through techniques similar to SQL injections, LDAP injection could result in the granting of permissions to unauthorized...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-use-after-free in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSJObjBtreeNode>::

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4735739433713664 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::enable_if<true, apfs_omap_key const*>::type APFSBtreeNode<apfs_omap_ke

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6402896596959232 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62500001015f...

CVE-2021-32651

OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions 4.4.1 and prior, an attacker can manipulate a user search filter to send forged queries to the application and explore the LDAP tree using Blind LDAP Injection techniques. The...

PT-2021-28279

Name of the Vulnerable Software and Affected Versions: Json::Value affected versions not specified Description: The issue is related to a crash caused by an unknown read. The crash state indicates a problem with the std:: 1:: tree and std:: 1::map functions, specifically when using...

PT-2021-28273

Name of the Vulnerable Software and Affected Versions: Json::Value affected versions not specified Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves the std:: 1:: tree and std:: 1::map functions, specifically with Json::Value::CZString and Json::Value. Th...

AMSITrigger - The Hunt For Malicious Strings

Hunting for Malicious Strings Usage: AMSI calls xmas tree mode -d, --debug Show Debug Info -m, --maxsiglength=VALUE Maximum signature Length to cater for, default=2048 -c, --chunksize=VALUE Chunk size to send to AMSIScanBuffer, default=4096 -h, -?, --help Show Help " -i, --inputfile=VALUE...

WordPress plugin authorization issue vulnerability (CNVD-2021-36538)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . An authorization issue vulnerability exists in versions o...

PT-2021-28263

Name of the Vulnerable Software and Affected Versions: Json::Value affected versions not specified Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves the std:: 1:: tree and std:: 1::map functions, specifically with Json::Value::CZString and Json::Value. Th...

CVE-2021-24192

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the Tree Sitemap WordPress plugin before 2.9, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install...

CVE-2021-24192

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the Tree Sitemap WordPress plugin before 2.9, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install...

CVE-2021-24192 Tree Sitemap < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the Tree Sitemap WordPress plugin before 2.9, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install...