173 matches found
Ubuntu: Security Advisory (USN-5123-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-5123
CVE-2020-5123 entry is rejected; do not use this candidate number.
CVE-2015-8546
An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Galaxy S6 Edge+, and Galaxy Note5 with the Shannon333 chipset. There is a stack-based buffer overflow in the baseband process that is exploitable for remote code execution via a fa...
CVE-2015-8546
Concrete details: CVE-2015-8546 affects Samsung mobile devices with Shannon333 baseband (Galaxy S6/S6 Edge/S6 Edge+/Note5) and firmware up to 2015-11-12. Vulnerability is a stack-based buffer overflow in the baseband process, enabling remote code execution via a fake base station. Exploitation st...
CVE-2013-5123
The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...
CVE-2013-5123
The CVE-2013-5123 issue affects Python-pip prior to 1.5, where the mirroring support (-M/--use-mirrors) performs insecure DNS queries and lacks proper authenticity checks, enabling MITM-like download tampering. Connected advisories confirm this vulnerability and describe the fix as removing the m...
CVE-2013-5123
The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...
CVE-2019-5123
The CVE-2019-5123 issue affects YouPHPTube 7.6 and involves SQL injection via the /objects/pluginSwitch.json.php endpoint (parameter dir). The TALOS advisory confirms authenticated SQL injections in the YouPHPTube 7.6 frontend/plugin switch logic, potentially allowing exfiltration of database dat...
CVE-2018-5123
CVE-2018-5123 describes a CSRF vulnerability in Bugzilla's report.cgi that can let a third party extract confidential information from a bug entry accessible to the victim. Affected are Bugzilla releases prior to 4.4; CVSS2 base 6.8 (NETWORK, no auth, partial confidentiality/integrity/availabilit...
Security Bulletin: Vulnerabilities in Python affect PowerKVM (CVE-2013-5123, CVE-2014-8991)
Summary PowerKVM is affected by two vulnerabilities in Python. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2013-5123 DESCRIPTION: Python pip could allow a remote attacker to bypass security restrictions, caused by the implementation of the mirroring support without...
Fedora 26 : bugzilla (2018-b79f325c48)
A CSRF vulnerability in Bugzilla's report.cgi would allow a third-party site to extract confidential information from a bug the victim had access to. This security bug has been published as CVE-2018-5123. This updates contains Bugzilla 5.0.4, which fixes the issue. Note that Tenable Network...
Exploit for Improper Input Validation in Linux Linux_Kernel
Exploiting CVE-2017-5123 Introduction This repository is...
Fedora 27 : kernel (2017-aa9927961f)
The 4.13.8 update contains a number of important fixes across the tree. ---- The 4.13.6 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...
CVE-2017-5123
creationtimestamp| type| source ---|---|--- 2017-12-29 22:27:04+00:00| published-proof-of-concept| https://t.me/antichat/526 2017-12-29 23:09:53+00:00| published-proof-of-concept| https://t.me/alexmakus/1557 2017-12-29 23:11:44+00:00| published-proof-of-concept| https://t.me/canyoupwnme/2959...
Fedora Update for kernel FEDORA-2017-cafcdbdde5
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 26 : kernel (2017-c110ac0eb1)
The 4.13.8 update contains a number of important fixes across the tree. ---- The 4.13.6 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenab...
Fedora 25 : kernel (2017-cafcdbdde5)
The 4.13.8 update contains a number of important fixes across the tree. ---- The 4.13.6 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenab...
Linux Kernel 4.14.0-rc4+ - 'waitid()' Privilege Escalation(CVE-2017-5123)
This is a guest post by a young and talented Portuguese exploiter, Federico Bento. He won this year’s Pwnie for Epic Achievement exploiting TIOCSTI ioctl. Days ago he posted a video demonstrating an exploit for CVE-2017-5123 and luckly for you I managed to convince him to do a write-up about it. ...
[ASA-201710-24] linux-zen: privilege escalation
Arch Linux Security Advisory ASA-201710-24 ========================================== Severity: High Date : 2017-10-16 CVE-ID : CVE-2017-5123 Package : linux-zen Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-445 Summary ======= The package linux-zen before...