[Vulnerability description]
freedesktop Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function
__glXGetDrawableAttribute().
[Vulnerability description]
A NULL pointer dereference in the function handle_viminfo_register() of vim v9.0 allows attackers to cause a Denial of
Service (DoS) via crafted file.
[Vulnerability description]
A NULL pointer dereference in the component /X11/xedit/lisp of Xedit v1.2.3 allows attackers to cause a Denial of
Service (DoS) via a crafted lisp.lsp file.
[Vulnerability description]
freedesktop Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function
dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an
DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3.
I think that building a tool that quite facilitates the scraping work of
the data presented by the Prometheus metrics, perhaps it is possible to
make the team that develops it becomes aware of the existing need to
protect them from their core.
23/01/2024:
– Google (search engine): ~ 1832 servers with exposed metrics
– Shodan ~ 7320 servers with exposed metrics
Searching the web for `javascript fork malloc bomb` returns results,
e.g. [here][1]: and [here][2]:
We got a javascript fork malloc bomb which crashed Chrome 121 on linux
with SIGILL and about one in five runs the virtual machine freezes.
SIGILL almost always is a sign of memory corruption 🙂
On android it crashes the current tab without explanation.
Firefox 121 on linux also crashes the current tab.
