#apple

CVE-2022-29746: bug_report/SQLi-6.md at main · k0xx11/bug_report

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.

2 years ago

CVE

Open in Source

#sql #vulnerability #web #windows #apple #js #java #php #auth #chrome #webkit

CVE-2022-29746: bug_report/SQLi-6.md at main · k0xx11/bug_report

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.

2 years ago

CVE

Open in Source

#sql #vulnerability #web #windows #apple #js #java #php #auth #chrome #webkit

AppleVideoDecoder CreateHeaderBuffer Out-Of-Bounds Free

AppleVideoDecoder suffers from an out-of-bounds free vulnerability. The attached video file contains a malformed HEVC Decoder Configuration Record that leads to an out-of-bounds free in CreateHeaderBuffer. When copying the VPS, PPS and SPS, the destination pointer is incremented, and if the copied data is larger than the length specified in the input file, it breaks and falls through to a condition that frees the destination pointer, even though it has been incremented. This could free the chunk allocated next to the destination memory.

2 years ago

Packet Storm

Open in Source

#vulnerability #apple

Virtual credit cards coming to Chrome: What you need to know

Google are introducing virtual credit cards to the Chrome browser for users of their services in the US. We take a look at what's in store. The post Virtual credit cards coming to Chrome: What you need to know appeared first on Malwarebytes Labs.

2 years ago

Malwarebytes

Open in Source

#android #apple #google #auth #chrome

CVE-2022-29751: bug_report/SQLi-5.md at main · k0xx11/bug_report

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.

2 years ago

CVE

Open in Source