node-tar: Process crash via PAX numeric path type confusion

Summary A crafted 2.5KB tar archive crashes any Node.js process that extracts it. The PAX header parser coerces all-digit path values to JavaScript numbers, which causes an uncaught TypeError when downstream code calls .split'/' on the numeric value. Error handlers and strict: false cannot...

EUVD-2023-23933

Malicious code in bioql PyPI...

Stack overflow

Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process...

CVE-2023-1709 Datalogics Library APDFL Stack-based Buffer Overflow

Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process...

RDP Manager 4.9.9.3 Denial Of Service

Document Title: =============== RDP Manager v4.9.9.3 - Local Denial of Servie Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2309 Release Date: ============= 2021-10-18 Vulnerability Laboratory ID VL-ID: ==================================...