Skip to content
OpenAdvisories

Archive

12 January 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical —

    Zalgo-like output that crashes the server

    ### Impact _What kind of vulnerability is it? Who is impacted?_ [`colors`](https://npmjs.com/package/colors) package caused zalgo-like output (see https://github.com/soketi/soketi/issues/276, https://github.com/Marak/colors.js/issues/289), breaking the server…

  • Critical 9.9
    CVE-2022-21675 Public exploit

    Bytecode Viewer v2.10.x Zip Slip

    Bytecode Viewer (BCV) is a Java/Android reverse engineering suite. Versions of the package prior to 2.11.0 are vulnerable to Arbitrary File Write via Archive Extraction (AKA "Zip Slip"). The vulnerability is exploited using a specially crafted archive that ho…