Astra Linux fly-dm Code Execution

The vulnerability of the graphical user interface component in the fly-dm system of the Astra Linux operating system is related to an error that allows control over the systemd daemon by generating commands like “fly-dmctl suspendtohyibernate-p”, which execute the command “systemctl -p...

CVE-2019-9704

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service daemon crash via a large crontab file because the calloc return value is not checked...

CVE-2019-9706

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service use-after-free and daemon crash because of a forcerescanuser error...

Vixie cron denial of service vulnerability (CNVD-2019-13243)

Vixie cron is a full-featured cron implementation based on SysV cron. cron is a daemon that runs scheduled tasks based on input from the command crontab. A denial of service vulnerability exists in previous versions of the Vixie Cron 3.0pl1-133 Debian package. The vulnerability stems from a...

CVE-2019-9706

CVE-2019-9706 affects Vixie Cron (Debian package cron) prior to the patched release 3.0pl1-133, where a force_rescan_user use-after-free can crash the daemon, enabling local denial of service. Public disclosures in Ubuntu/Debian advisories (USN USN-5259-2/3) and related OSSV/OpenVAS entries confi...

CVE-2019-9706: Use After Free

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service use-after-free and daemon crash because of a forcerescanuser error...

CVE-2019-9704: Unchecked Return Value

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service daemon crash via a large crontab file because the calloc return value is not checked...

PT-2019-5546

Name of the Vulnerable Software and Affected Versions Vixie Cron versions prior to 3.0pl1-133 Description The issue is related to a use-after-free error in the force rescan user function of the Cron daemon, which can cause a denial of service and daemon crash. This can be exploited by local users...

PT-2019-6260

Name of the Vulnerable Software and Affected Versions Vixie Cron versions prior to 3.0pl1-133 Description The issue is related to a memory allocation problem in the cron daemon, allowing an attacker to cause a denial of service by consuming excessive memory. This can be achieved by creating a lar...

PT-2019-6250

Name of the Vulnerable Software and Affected Versions Vixie Cron versions prior to 3.0pl1-133 Description The issue is related to a daemon scheduler task vulnerability in UNIX-like operating systems, specifically in the Cron system. It involves pointer dereference errors. Exploitation of this iss...

[SECURITY] Fedora 28 Update: systemd-238-12.git07f8cd5.fc28

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

[SECURITY] Fedora 28 Update: community-mysql-5.7.25-1.fc28

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

Exploit for Link Following in Kubernetes

!Github All Releaseshttps://img.shields.io/github/downloads/...

Flexera Software FlexNet Publisher lmgrd and vendor daemon component remote code execution vulnerability

Flexera Software FlexNet Publisher FLEXlm is the core software license management component of Flexera Software's Entitlement Relationship Management Solution, which provides pricing and customization of software license terms for software and hardware manufacturers. lmgrd and vendor daemon are...

CVE-2018-20033

A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and th...

Remote code execution

A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and th...

CVE-2018-20033

A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and th...

Monero: Zero-amount miner TX + RingCT allows monero wallet to receive arbitrary amount of monero

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out the report! Summary: By mining a...

CVE-2018-20033

FlexNet Publisher (lmgrd and vendor daemon) versions 11.16.1.0 and earlier are vulnerable to a memory corruption path that can cause the heartbeat to fail and the vendor daemon to shut down, with remote code execution possible. Public advisories (NVD, ICSA-19-192-05/07, CNVD) confirm CVE-2018-200...

PT-2019-3826

Name of the Vulnerable Software and Affected Versions FlexNet Publisher versions 11.16.1.0 and earlier Description A Remote Code Execution issue in the lmgrd and vendor daemon components could allow a remote attacker to corrupt memory by allocating or deallocating memory, which can cause the...