CVE-2023-6693

CVE-2023-6693 affects QEMU's virtio-net device. A stack-based buffer overflow in virtio_net_flush_tx can occur when flushing TX with features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and VIRTIO_NET_F_MRG_RXBUF enabled, potentially allowing a local attacker to read part of process memory via t...

CVE-2019-6693

creationtimestamp| type| source ---|---|--- 2023-07-06 11:08:24+00:00| published-proof-of-concept| https://t.me/dilagrafie/3103 2023-07-15 04:02:00+00:00| published-proof-of-concept| Telegram/FQgTqgAsC1BzgFQ3QhqXo3ZwrqpxzvjIHl33wB4sG5coLAQ 2023-08-16 06:30:09+00:00| published-proof-of-concept|...

Exploit for Use of Hard-coded Credentials in Fortinet Fortianalyzer

Decrypt FortiManager configuration secrets CVE-2020-9289 CV...

CVE-2020-6693

CVE-2020-6693 entry is rejected/not used and does not represent an active vulnerability.

CVE-2020-6693

...

Fortinet FortiOS < 5.6.10 / 6.0 < 6.0.7 / 6.2.x < 6.2.1 Vulnerable Encryption (FG-IR-19-007)

The remote host is running a version of FortiOS that has not yet enabled private-data-encryption. A authorized remote user with access or knowledge of the standard encryption key could gain access and decrypt the FortiOS backup files and all non-administor passwords and private keys.' CVE-2019-66...

CVE-2019-6693

Fortinet FortiOS contains a vulnerability CVE-2019-6693: use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup files. An attacker with access to the backup file could decrypt sensitive data, including users’ passwords (excluding admin), private keys’ passp...

CVE-2019-6693

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data includes users’ passwords except the...

CVE-2018-6693 Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability

An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use TOCTOU race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege...

CVE-2018-6693

CVE-2018-6693 describes an elevation-of-privilege flaw in ENSLTP where an unprivileged user can delete arbitrary files on Linux (affected: ENSLTP 10.2.3 Hotfix 1246778 and earlier; 10.5.0–10.5.1) by exploiting a TOCTOU race during a specific scanning sequence. The root cause is a race condition t...

CVE-2017-6693

CVE-2017-6693 concerns the Cisco Elastic Services Controller (ESC) ConfD server component. The issue allows an authenticated, local attacker to access information stored on the file system of an affected system (Unauthorized Directory Access). Affected releases are reported as 2.2(9.76) and 2.3(1...

CVE-2016-6693

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via an invalid data length, aka Qualcomm internal bug CR 1027585...

CVE-2016-6693

CVE-2016-6693 describes a vulnerability in the Qualcomm QDSP6v2 driver (msm-ds2-dap-config.c) used on Android. An invalid data length in this driver could allow a remote attacker to trigger a denial of service or cause unspecified impact. The issue affects Android builds prior to 2016-10-05. Publ...

dfiles.ru XSS vulnerability

Vulnerable URL: http://dfiles.ru/gold/forgot.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6693 VIP website status:| Yes Check dfiles.ru SSL...

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...

Memory corruption

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory...

CVE-2015-6693

The signatureSetSeedValue method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code ...

CVE-2015-6693

The CVE-2015-6693 vulnerability affects Adobe Acrobat/Reader products: 10.x before 10.1.16; 11.x before 11.0.13; Acrobat/Reader DC Classic before 2015.006.30094; and Acrobat/Reader DC Continuous before 2015.009.20069 on Windows and macOS. The flaw is in signatureSetSeedValue and can lead to arbit...

CVE-2012-6693

CVE-2012-6693 concerns GE Healthcare Centricity PACS Server with default credentials: nasro / nasro (ReadOnly) and nasrw (Read/Write). The connected documents confirm a default credential issue across Centricity PACS components, enabling remote access with these accounts. The primary root cause i...

CVE-2013-6693

The CVE describes a DoS in Cisco IOS MLDP on Cisco 7600 Series (older than 15.3(3)S) where configuring many VRFs and initiating many multicast flows can cause chunk corruption, triggering a device reload. The root cause is MLDP processing under heavy VRF multicast load. Exploitation requires the ...