Denial Of Service (DoS)

htmldoc is vulnerable to denial of service. The vulnerability exists due to a heap buffer overflow in pspdfprepareoutpages, in ps-pdf.cxx...

GHSA-RMW5-XPG9-JR29 Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. A memory leak in the configinput function in afacrossover.c allows an attacker to crash the application...

Directory Traversal

@backstage/techdocs-common is vulnerable to directory traversal. An attacker can read arbitrary system files from the environment where TechDocs documentation is built and published by setting a particular path for docsdir in mkdocs.yml...

PT-2021-14158

Name of the Vulnerable Software and Affected Versions: Sharp NEC Displays versions UN462A R1.300 and prior to it Sharp NEC Displays versions UN462VA R1.300 and prior to it Sharp NEC Displays versions UN492S R1.300 and prior to it Sharp NEC Displays versions UN492VS R1.300 and prior to it Sharp NE...

Command Injection

@floffah/build is vulnerable to command injection. Attackers can use the command line option to inject arbitrary command via settings...

Information Disclosure

github.com/thomasleister/prosody-filer is vulnerable to information disclosure. An attacker is able to obtain directory listings by shortening the URL and accessing a URL subdirectories other than /upload/...

Do you know your OpSec?

Open Source Intelligence OSINT is any information in the public domain that an attacker can dig up about you. Because of that it forms the basis of every Red Team engagement, as threat actor scenarios are created using publicly available information. Bearing that in mind it makes sense to review...

Open Redirection

hyn/multi-tenant is vulnerable to open redirection. Lack of URL validation allows an attacker to redirect users to a malicious site...

Gallery From Files <= 1.6.0 - Unauthenticated RCE

The upload feature of the plugin does not properly check for the allowed extensions, allowing them to be set in the request and attempting to remove the dangerous ones such as .php and .js, but forgetting about .php4, .html etc. As a result, unauthenticated users could upload arbitrary .php4 file...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker is able to send a malicious input to cause out of bounds read in tf.rawops.MaxPoolGradWithArgmax, leading to an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can cause an application crash or other undefined behavior by binding to a null pointer in tf.rawops.ParameterizedTruncatedNormal...

Regular expression deinal of service in express-validators

All versions of package express-validators are vulnerable to Regular Expression Denial of Service ReDoS when validating specifically-crafted invalid urls...

Privilege Escalation

drupal/drupal is vulnerable to privilege escalation. The vulnerability exists due to an access bypass in Drupal Core which allows JSON:API when JSON:API is in read/write mode...

Regular Expression Denial of Service (ReDoS) in ua-parser-js

ua-parser-js = 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time...

Open Redirection

drupal7 is vulnerable to open redirection. Insufficient validation of the destination query parameter in the drupalgoto function allows an attacker to redirect a user to a malicious site...

PT-2021-18641 · Unknown · Network Camera Device

Name of the Vulnerable Software and Affected Versions: Network camera device affected versions not specified Description: The issue concerns the manage users profile services of the network camera device, which allows an authenticated remote attacker to modify URL parameters and amend a user's...

Signature Verification Bypass

evolution is vulnerable to signature verification bypass. A "Valid signature" message is produced for an unknown identifier on a previously trusted key as the applcation does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and disput...

Denial Of Service (DoS)

chromium:sid is vulnerable to denial of service. An uninitialized use security issue has been found in the PDFium component of the Chromium browser...

Arbitrary Code Execution

killing is vulnerable to arbitrary code execution. The vulnerability exists as it does not sanitize the argument that is used in childprocess.exec, allowing users to use the function outside of its intended behaviour, which was to kill processes...