Linux hwclock 安全漏洞

Linux hwclock is a command from the Linux Foundation of America. It is used to display and set the hardware clock. A security vulnerability exists in Linux hwclock version 13-v2.27, which originated from a vulnerability that allows an attacker to gain escalated privileges or execute arbitrary...

CVE-2022-28048

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...

CVE-2022-28048

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...

Integer overflow

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...

CVE-2022-28048

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...

CVE-2022-28048

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...

CVE-2022-28048

CVE-2022-28048 affects the STB library (STB v2.27) in the component stbi__jpeg_decode_block_prog_ac, causing an integer shift of invalid size. The connected records (Astra Linux entry and Gentoo GLSA) corroborate the affected library and version. Gentoo GLSA 2024-09-15 links to the same issue and...

CVE-2022-28048

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...

CVE-2022-28042

CVE-2022-28042 refers to a heap-based use-after-free in stb_image.h version 2.27, specifically in stbi__jpeg_huff_decode. Public advisories (Debian DLA-3305 and Gentoo GLSA 2024-09-15) document this as a vulnerability in the libstb library and list CVE-2022-28042 among fixed issues when upgrading...

CVE-2022-28042

stbimage.h v2.27 was discovered to contain an heap-based use-after-free via the function stbijpeghuffdecode...

Code injection

downloadfile in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files...

GL-AR300M-Lite 2.2.7 Command Injection / Directory Traversal

Exploit Title: GL-AR300M-Lite Authenticated Command injection - Arbitrary file download - Directory Traversal Date: 15/1/2019 Exploit Author: Pasquale Turi aka boombyte Vendor Homepage: https://www.gl-inet.com/ Software Link: https://www.gl-inet.com/products/gl-ar300m/ Version: Firmware version...

XSS in IBM Open Admin Tool

“XSS in IBM Open Admin Tool OAT2.27installwindows.exe” Product version tested : OAT v2.27 Vendore has been informed : July 27, 2010 They fix the vulnerability on : March 2011 Fixed version: OAT v2.72 Credit : sumit kumar soni [email protected] Product Link:...