POC-DUMP

POC-DUMP Writeup or scripting for any interesting bugs/vulnerabilities that I found. Current CVEs and counting: • CVE-2021-35475 • CVE-2022-36194 • CVE-2022-36667 • CVE-2022-36668 • CVE-2022-36669 • CVE-2022-37137 • CVE-2022-37138 • CVE-2022-37139 • CVE-2022-37140 • CVE-2022-3211 • CVE-2022-3231...

EUVD-2022-39981

Malicious code in bioql PyPI...

RHEL 7 : mysql (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - mysql: InnoDB unspecified vulnerability CPU Oct 2021 CVE-2021-35604 - mysql: openssl: POLY1305 MAC...

CVE-2023-28929: Uncontrolled Search Path Element

Trend Micro Security 2021, 2022, and 2023 Consumer are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence mechanism which could execute a malicious program each time the executable file is started...

RHEL 7 : rh-mariadb103-mariadb and rh-mariadb103-galera (RHSA-2020:5246)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5246 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The...

PT-2022-27019 · Baramundi · Baramundi Management Suite

Name of the Vulnerable Software and Affected Versions: baramundi Management Suite versions 2021 R1 through 2022 R1 Description: The issue allows remote code execution. It is estimated that a significant number of devices worldwide could be affected, although the exact number is not specified. The...

PT-2022-23941 · Trend Micro · Trend Micro Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Security versions 2021 through 2022 Description: The issue is an Out-Of-Bounds Read Information Disclosure that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected...

PT-2022-17523 · Autodesk · Autodesk Trueview

Name of the Vulnerable Software and Affected Versions: Autodesk TrueView versions 2021 through 2022 Description: A memory corruption issue may lead to remote code execution through maliciously crafted DWG files. This can occur when parsing DWG files, allowing an attacker to write beyond the...

CentOS 8 : mysql:8.0 (CESA-2021:3590)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3590 advisory. - mysql: Server: Stored Procedure unspecified vulnerability CPU Oct 2020 CVE-2020-14672 - mysql: Server: FTS unspecified vulnerability CPU Oct 2020...

CVE-2021-2022 affecting package mysql 8.0.22-2

CVE-2021-2022 affecting package mysql 8.0.22-2. An upgraded version of the package is available that resolves this issue...

MariaDB 10.4.0 < 10.4.14

The version of MariaDB installed on the remote host is prior to 10.4.14. It is, therefore, affected by a vulnerability as referenced in the 10.4.14 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.50 and prior,...

MariaDB 10.1.0 < 10.1.46

The version of MariaDB installed on the remote host is prior to 10.1.46. It is, therefore, affected by a vulnerability as referenced in the 10.1.46 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.50 and prior,...

MariaDB 10.3.0 < 10.3.24

The version of MariaDB installed on the remote host is prior to 10.3.24. It is, therefore, affected by a vulnerability as referenced in the 10.3.24 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.50 and prior,...

MariaDB 10.5.0 < 10.5.5

The version of MariaDB installed on the remote host is prior to 10.5.5. It is, therefore, affected by a vulnerability as referenced in the 10.5.5 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.50 and prior,...

MariaDB 10.2.0 < 10.2.33

The version of MariaDB installed on the remote host is prior to 10.2.33. It is, therefore, affected by a vulnerability as referenced in the 10.2.33 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.50 and prior,...

Photon OS 1.0: Mysql PHSA-2021-1.0-0362

An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0362. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid146863...

Photon OS 2.0: Mysql PHSA-2021-2.0-0320

An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0320. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid146769...

Fedora: Security Advisory for community-mysql (FEDORA-2021-b1d1655cef)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MySQL 5.6.x < 5.6.51 Multiple Vulnerabilities (Jan 2021 CPU)

The version of MySQL running on the remote host is 5.6.x prior to 5.6.51. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the January 2021 Critical Patch Update advisory: - Vulnerability in the MySQL Server product of Oracle MySQL component: Server:...

CVE-2021-2022

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromis...