PT-2022-13708 · Mruby +1 · Mruby +1

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 3.2 Description: The issue is related to a NULL Pointer Dereference in mrb vm exec with super, which can cause the mruby interpreter to crash. This affects the availability of the system. Recommendations: For versions...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Docker $ sudo docker build -t . $ sudo...

UBUNTU-CVE-2022-1106

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

PT-2022-13664

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description The issue is related to a use after free in mrb vm exec. Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue...

mruby 资源管理错误漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby 3.1 and earlier, which stems from post-release reuse in mrbvmexec. No details of the vulnerability are provided at this time...

PT-2022-13633

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description The issue is related to a user after free in mrb vm exec. This problem affects the mruby GitHub repository. Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue...

PT-2022-28265

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue concerns the use of shell exec and exec functions, which were not properly escaping filenames and configuration settings in most cases. Recommendations At the moment, there is n...

PT-2022-29078

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29161

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29011

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29130

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

Python Exec, Python Meterpreter, Python Reverse TCP Stager

Execute a Python payload as an OS command from a Posix-compatible shell. Run a meterpreter server in Python compatible with 2.5-2.7 & 3.1+. Connect back to the attacker Module Options msf use payload/cmd/unix/python/meterpreter/reversetcp msf payloadreversetcp show actions ...actions... msf...

Python Exec, Python Meterpreter, Python Reverse HTTP Stager

Execute a Python payload as an OS command from a Posix-compatible shell. Run a meterpreter server in Python compatible with 2.5-2.7 & 3.1+. Tunnel communication over HTTP Module Options msf use payload/cmd/unix/python/meterpreter/reversehttp msf payloadreversehttp show actions ...actions... msf...

Python Exec, Python Meterpreter, Python Reverse HTTPS Stager

Execute a Python payload as an OS command from a Posix-compatible shell. Run a meterpreter server in Python compatible with 2.5-2.7 & 3.1+. Tunnel communication over HTTP using SSL Module Options msf use payload/cmd/unix/python/meterpreter/reversehttps msf payloadreversehttps show actions...

Python Exec, Python Meterpreter Shell, Reverse TCP Inline

Execute a Python payload as an OS command from a Posix-compatible shell. Connect back to the attacker and spawn a Meterpreter shell Module Options msf use payload/cmd/unix/python/meterpreterreversetcp msf payloadmeterpreterreversetcp show actions ...actions... msf payloadmeterpreterreversetcp set...

Python Exec, Python Meterpreter, Python Bind TCP Stager with UUID Support

Execute a Python payload as an OS command from a Posix-compatible shell. Run a meterpreter server in Python compatible with 2.5-2.7 & 3.1+. Listen for a connection with UUID Support Module Options msf use payload/cmd/unix/python/meterpreter/bindtcpuuid msf payloadbindtcpuuid show actions...

Python Exec, Python Pingback, Bind TCP (via python)

Execute a Python payload as an OS command from a Posix-compatible shell. Listens for a connection from the attacker, sends a UUID, then terminates Module Options msf use payload/cmd/unix/python/pingbackbindtcp msf payloadpingbackbindtcp show actions ...actions... msf payloadpingbackbindtcp set...

NETGEAR Multiple Routers Remote Code Execution Vulnerability

NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution...

PT-2022-6931

Name of the Vulnerable Software and Affected Versions colord affected versions not specified Description The issue is related to two Information Disclosure vulnerabilities in colord. These vulnerabilities are located in colord/src/cd-device-db.c and colord/src/cd-profile-db.c. The problem arises...

In the Linux kernel through 5.16.10 certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g. with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.

...