Backdoor.Win32.IRCBot.gen Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/96f5cdfa5b3416c819d76060f11dc88d.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.IRCBot.gen Vulnerability: Unauthenticated Remote Command Execution Description: The...

CVE-2020-6777

creationtimestamp| type| source ---|---|--- 2021-01-14 18:49:52+00:00| seen| https://t.me/cibsecurity/22168...

CVE-2020-6777

Concisely: CVE-2020-6777 is a stored XSS in Bosch PRAESIDEO (≤4.41) and PRAESENSA (≤1.10) web management interfaces. Requires admin authentication; attacker can store script that runs in a victim’s browser when they log in, allowing interaction with the interface under the victim’s privileges. Th...

CVE-2019-6777

CVE-2019-6777 affects ZoneMinder v1.32.3 with a reflected XSS in web/skins/classic/views/plugin.php reachable via zm/index.php?view=plugin pl parameter. Root cause: insufficient input sanitization for the pl parameter, allowing injection into reflected output. Impact per sources: partial confiden...

CVE-2018-6777

CVE-2018-6777 affects Jiangmin Antivirus 16.0.0.100, specifically the KVFG.sys driver. The root cause is failure to validate input values for IOCTL 0x220400, allowing a local attacker to trigger a denial of service (BSOD) and potentially other unspecified impacts. The Red Hat and CNVD entries cor...

CVE-2017-6777

A vulnerability in the ConfD server of the Cisco Elastic Services Controller ESC could allow an authenticated, remote attacker to acquire sensitive system information. The vulnerability is due to insufficient protection of sensitive files on the system. An attacker could exploit this vulnerabilit...

CVE-2017-6777

The CVE-2017-6777 vulnerability affects Cisco Elastic Services Controller (ESC) in the ConfD server component, where insufficient protection of sensitive files allows an authenticated remote attacker to view configuration parameters and obtain sensitive system information. Affected releases are 2...

CVE-2016-6777

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

Privilege escalation

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-6777

CVE-2016-6777 affects NVIDIA Tegra kernel driver (NVMAP) with a use-after-free vulnerability: referencing memory after it has been freed can lead to denial of service or possible privilege escalation. Base details in NVIDIA/Tegra entries show a CVSSv3.0 base score of 8.4 and a local/privilege-esc...

Mageia: Security Advisory (MGASA-2015-0467)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-6777

CVE-2015-6777 is a use-after-free in Chrome/Chromium’s DOM implementation. The vulnerability resides in ContainerNode::notifyNodeInsertedInternal (WebKit source), enabling a remote attacker to trigger a denial of service (and possibly other impact) via DOMCharacterDataModified events when inserti...

CVE-2015-6777

Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via...

RHEL 6 : chromium-browser (RHSA-2015:2545)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:2545 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...

CVE-2014-6777

The CVE-2014-6777 entry concerns the Android app blueeleph (aka eg.film.blueeleph) version 1.0, which does not verify X.509 certificates from SSL servers. This certificate validation flaw enables a man-in-the-middle to spoof servers and exfiltrate sensitive information via a crafted certificate. ...

SuSE 11.2 Security Update : PHP5 (SAT Patch Number 6777)

This update fixes CVE-2011-1398 / CVE-2011-4388 header injection via CR. This update also changes the default configuration to use FilesMatch with 'SetHandler' rather than 'AddHandler' to protect weakly written web applications from content confusion. Since this is a hardening measure, no CVE was...

SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 6777)

Mozilla XULrunner was upgraded to 1.9.0.17 fixing some bugs and regressions. The following security bug has been fixed : - The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service application...

CVE-2008-6777

The vulnerability affects MyPHP Forum 3.0 and earlier (CVE-2008-6777). It includes multiple SQL injection paths: parameters (id) in confirm, (user) in newconfirm, and (reqpwd) in member.php, plus (quote) in post and (pid) in edit actions of post.php. Root cause is unsanitized user input allowing ...

CVE-2008-6777

creationtimestamp| type| source ---|---|--- 2008-10-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6879...

CVE-2006-6777

CVE-2006-6777 is a Cross‑site Scripting (XSS) vulnerability affecting the Future Internet index.cfm page. The issue arises from manipulating the categoryId parameter in a Portal.ShowPage action, allowing remote attackers to inject arbitrary web script or HTML. The published metric indicates a CVS...