2422 matches found
Google Android kernel elevation of privilege vulnerability (CNVD-2019-44505)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. kernel is one of the kernels. A double release vulnerability exists in the 'driveroverridestore' and 'driveroverrideshow' functions of the bus.c file in the Android kernel. A loca...
DEBIAN-CVE-2018-9415
In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel...
VyOS restricted-shell Escape and Privilege Escalation
This module exploits command injection vulnerabilities and an insecure default sudo configuration on VyOS versions 1.0.0 use exploit/linux/ssh/vyos/restrictedshellprivesc msf undefinedrestrictedshellprivesc show actions ...actions... msf undefinedrestrictedshellprivesc set ACTION msf...
kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c
The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel doesn't properly validate the sigevent-sigevnotify field, which leads to out-of-bounds access in the showtimer function...
CVE-2018-18527
OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...
Linux kernel information disclosure vulnerability (CNVD-2018-20690)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in the callers of the 'showopcodes' function in the Linux kernel, which stems from a lack of address detection in the...
DEBIAN-CVE-2018-14656
A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...
UBUNTU-CVE-2018-14656
A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...
LibreHealthIO LH-EHR SQL Injection Vulnerability
LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. A SQL injection vulnerability exists in the Show Groups Popup SQL query function in the LibreHealthIO LH-EHR REL-2.0.0 release. A remote attacker can exploit the vulnerability to execute...
PT-2018-2804 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is caused by a missing address check in the callers of the show opcodes function in the Linux kernel, allowing an attacker to dump kernel memory at an arbitrary kernel addres...
CVE-2018-1000650
LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters...
CVE-2018-1000650
LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters...
Sql injection
LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters...
CVE-2018-1000650
LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters...
CVE-2018-1000650
CVE-2018-1000650 affects LibreHealthIO lh-ehr REL-2.0.0. The connected documents describe a SQL Injection vulnerability in the Show Groups Popup SQL query functions that can allow a remote attacker to execute malicious database queries through parameters under user control. No remediation details...
CVE-2018-1000650: Improper Neutralization of Special Elements used in an SQL Command
LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters...
PT-2018-9503
Name of the Vulnerable Software and Affected Versions LibreHealthIO lh-ehr version REL-2.0.0 Description The issue concerns a SQL Injection vulnerability in the Show Groups Popup SQL query functions. This can allow an attacker to perform malicious database queries. The attack is exploitable via...
Chaturbate: CSRF in cancel group and private show requests
The hacker found that the private and group show cancel urls were not checking for CSRF headers. This issue was quickly resolved. I have found a CSRF vulnerability in chat room. When users cancel group shows for any chat room, a POST request is made to the server on this endpoint...