CVE-2021-46327

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...

CVE-2021-46331

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype...

CVE-2021-46332

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter...

CVE-2021-46331

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype...

CVE-2021-46330

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...

CVE-2021-46327

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...

CVE-2021-46332: Out-of-bounds Write

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter...

CVE-2021-46327: Undefined Security Weakness

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...

CVE-2021-46330: Undefined Security Weakness

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...

PT-2022-12646

Name of the Vulnerable Software and Affected Versions Moddable SDK version 11.5.0 Description A heap-buffer-overflow issue was discovered in the Moddable SDK via the xs/sources/xsDataView.c file, specifically in the fxUint8Getter function. Recommendations For Moddable SDK version 11.5.0, consider...

Is your web browser vulnerable to data theft? XS-Leak explained

In recent news, IT security researchers from Ruhr-Universität Bochum RUB and the Niederrhein University of Applied Sciences have disclosed 14 new cross-site leak also known as XSLeak or XS-Leak attacks that can affects modern browsers, such as Google Chrome, Microsoft Edge, Mozilla Firefox, and...

CVE-2021-29324

OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c...

CVE-2021-29326

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c...

CVE-2021-29324

CVE-2021-29324 affects OpenSource Moddable v10.5.0, with a stack overflow in the component /moddable/xs/sources/xsScript.c. The vulnerability stems from memory boundary handling that can lead to incorrect read/write across memory. NVD reports a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL, LOW a...

PT-2021-18172

Name of the Vulnerable Software and Affected Versions: Moddable version 10.5.0 Description: A heap buffer overflow was discovered in the fx ArrayBuffer function at /moddable/xs/sources/xsDataView.c. This issue affects the Moddable software. Recommendations: For Moddable version 10.5.0, consider...

PT-2021-18169

Name of the Vulnerable Software and Affected Versions: OpenSource Moddable version 10.5.0 Description: The issue is related to a stack overflow in the OpenSource Moddable software. This overflow occurs via the component /moddable/xs/sources/xsScript.c. Recommendations: For OpenSource Moddable...

MEAT - This Toolkit Aims To Help Forensicators Perform Different Kinds Of Acquisitions On iOS Devices

M.E.A.T. - Mobile Evidence Acquisition Toolkit Meet M.E.A.T! From Jack Farley - BlackStone Discovery This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices and Android in the future. Requirements to run from source Windows or Linux Python 3.7.4 or 3.7.2 Pip...

GitLab: Responsible Disclosure of Privacy Leakage Issue

Greetings, I am Mojtaba Zaheri, a doctoral candidate in Computer Science, affiliated with the NJIT Cybersecurity Research Center. Together with my doctoral dissertation advisor, Prof. Reza Curtmola, we are reaching out to perform responsible disclosure of a vulnerability present on the GitLab...

PT-2020-6150

Name of the Vulnerable Software and Affected Versions Xen versions 4.6 through 4.14.x Description An issue was discovered when acting upon a guest XS RESET WATCHES request, where not all tracking information is freed. This can cause unbounded memory usage in oxenstored, leading to a system-wide...

CVE-2020-25464

Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is only partially initialized because the stack overflowed while creating the frame. This leads to a crash in the code sending the stack frame to the debugger...