CVE-2021-33122: Undefined Security Weakness

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0153: Out-of-bounds Write

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Google Chrome 78.0.3904.70 - Remote Code Execution Exploit

Exploit Title: Google Chrome 78.0.3904.70 - Remote Code Execution Exploit Author: deadlock Forrest Orr Type: RCE Platform: Windows Website: https://forrest-orr.net Twitter: https://twitter.com/ForrestOrr Vendor Homepage: https://www.google.com/chrome/ Software Link:...

CVE-2021-33078: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition within a thread in firmware for some IntelR OptaneTM SSD and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-21151: Undefined Security Weakness

Processor optimization removal or modification of security-critical code for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21237: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer access in firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2022-3830

Name of the Vulnerable Software and Affected Versions IntelR SSD versions affected versions not specified IntelR OptaneTM SSD versions affected versions not specified IntelR SSD DC Products versions affected versions not specified Description The issue is related to insufficient control flow...

PT-2022-3920

Name of the Vulnerable Software and Affected Versions IntelR NUCs affected versions not specified Description The issue is related to improper buffer restrictions in the firmware of some IntelR NUCs, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2022-3788

Name of the Vulnerable Software and Affected Versions IntelR RealSenseTM ID Solution F450 versions prior to 2.6.0.74 Description The issue is related to insecure default variable initialization, which may allow an unauthenticated user to enable information disclosure via physical access. This is...

PT-2022-3184

Name of the Vulnerable Software and Affected Versions IntelR Boot Guard and IntelR TXT affected versions not specified Description The issue is related to the implementation of IntelR Boot Guard and IntelR TXT technologies in IntelR processors, which may allow an unauthenticated user to potential...

PT-2022-3027

Name of the Vulnerable Software and Affected Versions IntelR In-Band Manageability software versions prior to 2.13.0 Description The issue is related to improper authentication in the IntelR In-Band Manageability software, which may allow a privileged user to potentially enable escalation of...

PT-2022-3030

Name of the Vulnerable Software and Affected Versions IntelR Manageability Commander versions prior to 2.2 Description The issue is related to improper input validation, which may allow an authenticated user to potentially enable escalation of privilege via adjacent access. This could be exploite...

DEBIAN-CVE-2022-24884

ecdsautils is a tiny collection of programs used for ECDSA keygen, sign, verify. ecdsaverifypreparelegacy does not check whether the signature values r and s are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring multiple...

ECDSA Util 数据伪造问题漏洞

ECDSA Util is a collection of applets for ECDSA. A security vulnerability exists in ECDSA Util versions prior to 0.4.1, which stems from ecdsaverifypreparelegacy not checking that the signature values r and s are non-zero...

The vulnerability of the group_list component of the Advantech R-SeeNet monitoring software allows a hacker to execute arbitrary SQL queries.

The vulnerability of the “ord” parameter in the grouplist component of the Advantech R-SeeNet monitoring software for routers is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remote...

The vulnerability of the execution file C:\R-SeeNet\mysql\bin\mysqld.exe, which is part of the monitoring service for routers of the Advantech R-SeeNet software, allows a perpetrator to gain increased privileges.

The vulnerability of the execution file C:\R-SeeNet\mysql\bin\mysqld.exe, which is part of the monitoring service for the Advantech R-SeeNet router, relates to deficiencies in access control to the C:\R-SeeNet directory. Exploiting this vulnerability could allow an attacker to enhance their...

PT-2022-19066

Name of the Vulnerable Software and Affected Versions dhcms version 20170919 Description The issue allows for arbitrary folder deletion via the /admin.php?r=admin/AdminBackup/del API endpoint. This could potentially lead to data loss or disruption of service. No information is provided about the...

CVE-2022-28527: Improper Limitation of a Pathname to a Restricted Directory

dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del...

PT-2022-13896

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.7.0 Description The issue is related to an out-of-bounds read in the r bin java constant value attr new function. This bug causes the program to read data past the end of the intended buffer, potentially allowing...

PT-2022-13897

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.7.0 Description The issue is related to an out-of-bounds read in the r bin java bootstrap methods attr new function. This bug causes the program to read data past the end of the intended buffer, potentially allowing...