blankspace

Blank Space Blank Space is a refactoring of James Forshaw's original proof of concept for CVE-2021-43893, EFSRPC arbitrary file upload privilege escalation. Blank Space can create arbitrary files on a remote host that is using unconstrained delegation if it isn't patched for CVE-2021-43893. File...

@afilmory/builder (>=0.1.3, <=0.2.2), @asset-toolkit/exif-extractor (>=0.6.0, <=0.6.8) +90 more potentially affected by CVE-2026-43893 via exiftool-vendored (>=1.5.3, <=34.3.0)

exiftool-vendored NPM version =1.5.3, =0.1.3, =0.6.0, =1.0.2, =9.0.0, =1.0.0, =0.1.0, =1.0.0, =0.0.0, =1.1.4, =0.1.0, =0.1.0, =0.39.0, =1.7.2 and more Source cves: CVE-2026-43893 Source advisory: MEND:CVE-2026-43893...

CVE-2026-43893

creationtimestamp| type| source ---|---|--- 2026-05-05 09:00:04+00:00| seen| Telegram/YNBAQ7wY3nDaf6oW9SSpET1W5P-GdTLvm9dgaOEDkfw4Y...

CVE-2024-43893

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CVE-2022-43893

IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload. IBM X-Force ID: 240634...

Linux Distros Unpatched Vulnerability : CVE-2024-43893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an invalid baudbase can result in uartclk being zero, which will...

SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2024:3483-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3483-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The...

SUSE-SU-2024:3251-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35965: Fix not validating setsockopt user input bsc1224579. - CVE-2024-35933: Fixed build regression bsc1224640. - CVE-2024-43883: Do not drop references...

SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2024:3190-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3190-1 advisory. The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following securit...

SUSE SLES12: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:3189-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3189-1 advisory. The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

Photon OS 4.0: Linux PHSA-2024-4.0-0677

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0677. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-43893 serial: core: check uartclk for zero to avoid divide by zero

In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an invalid baudbase can result in uartclk being zero, which will result in a divide by zero error in uartgetdivisor. The check for uartcl...

CVE-2024-43893

In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an invalid baudbase can result in uartclk being zero, which will result in a divide by zero error in uartgetdivisor. The check for uartcl...

CVE-2022-43893

creationtimestamp| type| source ---|---|--- 2023-10-17 07:32:35+00:00| seen| https://t.me/cibsecurity/72397...

CVE-2022-43893

CVE-2022-43893 affects IBM Security Verify Privilege On-Premises (11.5). The IBM bulletin lists remediation for 11.5 (Mac: 11.5-ISV-PVR-WIN-MACOS-2.1; Windows: 11.5-ISV-PV-11.5.000002-PM-11.4.1). The description in the sources is incomplete (refers to a malicious payload) and does not provide exp...

CVE-2022-43893 IBM Security Verify Privilege denial of service

IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload. IBM X-Force ID: 240634...

CVE-2023-43893

creationtimestamp| type| source ---|---|--- 2023-10-03 02:47:26+00:00| seen| https://t.me/cibsecurity/71446...

CVE-2023-43893

CVE-2023-43893 concerns Netis N3Mv2-V1.0.1.865, where the Wake-On-LAN (WoL) function’s wakeup_mac parameter is vulnerable to command injection via a crafted payload. The issue is described across multiple sources (NVD, Red Hat, CVE List, CNNVD, etc.) as a router/network device vulnerability with ...

Dropping Files on a Domain Controller Using CVE-2021-43893

On December 14, 2021, during the Log4Shell chaos, Microsoft published CVE-2021-43893, a remote privilege escalation vulnerability affecting the Windows Encrypted File System EFS. The vulnerability was credited to James Forshaw of Google Project Zero, but perhaps owing to the Log4Shell atmosphere,...

CVE-2021-43893

creationtimestamp| type| source ---|---|--- 2021-12-15 17:34:38+00:00| seen| https://t.me/truesecator/2447 2021-12-15 18:14:21+00:00| seen| https://t.me/cibsecurity/34009 2022-02-15 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5414 2022-02-24 15:45:23+00:00|...