Month: July 2023

Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a...

Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service....

Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service....

USN-6130-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a spurious warning in the IPv6 subsystem. This update removes the undesired warning message....

A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via...

In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service. Read More

Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Jul 07 SEC Consult Vulnerability Lab Security Advisory < 20230705-0 > ======================================================================= title: Path traversal...

Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Jul 07 SEC Consult Vulnerability Lab Security Advisory < 20230703-0 > ======================================================================= title: Multiple Vulnerabilities...