4205 matches found
ClickFix Server
This creates a Web Server which hosts a ClickFix type exploit. When a user visits the site they are given instructions on pasting our payload into a run dialog. When using a custom html page, please use INSERTPAYLOADHERE as the spot to put the generated payload in. Module Options msf use...
PT-2022-8023 · Unknown · Vova07 Yii2 Fileapi Widget
Name of the Vulnerable Software and Affected Versions: vova07 Yii2 FileAPI Widget versions up to 0.1.8 Description: A vulnerability was found in the vova07 Yii2 FileAPI Widget, which has been declared as problematic. The issue affects the run function of the file actions/UploadAction.php. The...
This Week in Spring - Happy New Year 2023 edition - December 27th, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! Its 27 December as I write this and - being honest - I couldnt be happier. Its raining outside. Im in a warm cozy office. Good music is playing. People are asleep in my home. I can hear the raindrops and wind outside the...
CVE-2022-36354
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensiti...
DEBIAN-CVE-2022-36354
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensiti...
UBUNTU-CVE-2022-36354
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensiti...
CVE-2022-34483
An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code. While very similar, this is a separate issue from...
OpenImageIO 缓冲区错误漏洞
OpenImageIO is an image read and write library that also provides several tools and applications. OpenImageIO v2.3.19.0 is vulnerable to a heap out-of-bounds write vulnerability when processing RLE-encoded BMP images. An attacker could exploit this vulnerability to write arbitrary out-of-bounds...
CVE-2022-25171 Command Injection
The package p4 before 0.0.7 are vulnerable to Command Injection via the run function due to improper input sanitization...
CVE-2022-25171
The package p4 before 0.0.7 are vulnerable to Command Injection via the run function due to improper input sanitization...
PT-2022-17110 · P4 · P4
Name of the Vulnerable Software and Affected Versions: p4 versions prior to 0.0.7 Description: The issue is related to Command Injection via the run function due to improper input sanitization. Recommendations: For versions prior to 0.0.7, update to version 0.0.7 or later to resolve the issue. As...
p4 操作系统命令注入漏洞
p4 is a small utility library for working with Perforce by the individual developer Nate Long. An operating system command injection vulnerability exists in versions prior to p4 0.0.7, which stems from incorrect input cleanup, and a command injection vulnerability via the run function...
CVE-2022-43486
Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices...
HCL Technologies HCL BigFix Platform 授权问题漏洞
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. HCL Technologies HCL BigFix Platform has a security vulnerability that stems fro...
PT-2022-26438 · Hcl +1 · Bigfix Platform
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logge...
Pending owner can front-run current owner when current owner wants to cancel the ownership transfer.
Lines of code Vulnerability details Impact OwnableUpgradable contract has been modified to transfer ownership in a two-step ownership transfer way. This introduces an issue of front-run when admin adds a pendingOwner but later on decides to cancel the ownership transfer. Pending owner can become...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Dec 2022)
This host is missing a critical security update according to Microsoft Office Click-to-Run update December 2022 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Microsoft Windows Multiple Vulnerabilities (KB5021235)
This host is missing an important security update according to Microsoft KB5021235 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
