-
**Describe the bug**
The lucene-core package used today is vulnerable due to a Stack-based Buffer Overflow. The `parseUnionExp()`, `parseInterExp()`, and `parseConcatExp()` methods in the `RegExp` cl…
-
Went for an interview and they pointed out a security exploit in our system.
In struct _fileInfo on line 63, it contains the following member:
`long long int fileLen;`
The file length shoul…
-
![1](https://github.com/prosyslab-classroom/cs348-information-security/assets/82636081/2cdcd2d5-8f64-47b8-8499-010600b76a5d)
## Name: Jisoo Yang
## Short Description
For me, the "Buffer Ove…
-
The vulnerable function `stbi_jpeg_load_from_memory` in file [O2ImageDecoder_JPEG_libjpeg.m](https://github.com/ravynsoft/ravynos/blob/main/Frameworks/Onyx2D/O2ImageDecoder_JPEG_libjpeg.m#L28) is used…
-
Vulnerability scan shown a CVE for `NPD:v0.8.19`
```
NVD
CVE-2023-4911
Published: 2023-10-03 - Modified: 2024-02-22
CVSS v3: 7.8
Description
A buffer overflow was discovered in the GNU C Li…
-
Related to https://github.com/owasp-dep-scan/dep-scan/issues/320
[bom.json](https://github.com/user-attachments/files/16117269/bom.json)
We're currently reporting CVEs for version-less generic p…
-
So I looked through the threats recently and again and again I find it difficult to read through the JSON document.
What bothers me the most is the combination of text in details, mitigation, and e…
-
**Git LFS over HTTPS Blocked by Fortinet IPS due to Basic Authorization Overflow**
After we upgraded GitLab from 17.1 to 17.2 all our repo using LFS were completely useless as we could not push or …
jejbq updated
21 hours ago
-
### ⚠️ Please verify that this question has NOT been raised before.
- [X] I checked and didn't find similar issue
### 🛡️ Security Policy
- [X] I agree to have read this project [Security Policy](ht…
-
Use-after-free, double free and heap buffer overflows are mentioned as vulnerabilities, but not how to exploit them.
There are good explanations of heap exploiting techniques here: https://heap-exp…