CVE-2021-25631

In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist can be circumvented by manipulating the link so it doesn't match the denylist but results in ShellExecute attempting to launch an executable type...

CVE-2021-25631

In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist can be circumvented by manipulating the link so it doesn't match the denylist but results in ShellExecute attempting to launch an executable type...

KLA12032 ACE vulnerability in LibreOffice

A code execution vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories LibreOffice 7.x vulnerabilities Related products LibreOffice CVE list CVE-2021-25631 critical Solution Upgrade to LibreOffice = 7.0.5 or = 7.1.2...

Cisco IOS和Cisco IOS XR 权限许可和访问控制问题漏洞

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. An information disclosure vulnerability exists in the CLI parser in Cisco IOS XR versions prior to 7.1.2, 7.2.1, and 7.3.1. The vulnerability stems from insufficient application of...

Safari Webkit For iOS 7.1.2 JIT Optimization Bug Exploit

This Metasploit module exploits a JIT optimization bug in Safari Webkit. This allows us to write shellcode to an RWX memory section in JavaScriptCore and execute it. The shellcode contains a kernel exploit CVE-2016-4669 that obtains kernel rw, obtains root and disables code signing. Finally we...

Safari Webkit For iOS 7.1.2 JIT Optimization Bug

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Safari Webkit JIT Exploit for iOS 7.1.2', 'Description' = %q This module exploits a JIT optimization bug in Safari Webkit. This allows us to writ...

CVE-2020-8591

eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request...

CVE-2020-8591

eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request...

CVE-2020-8592

eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...

Sql injection

eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...

CVE-2020-8591

eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request...

CVE-2020-8591

CVE-2020-8591 affects eG Manager 7.1.2, where an authentication bypass is possible via the login endpoint com.egurkha.EgLoginServlet with parameters like uname=admin, upass=, accessKey=... This indicates a failure in access control for login handling that could grant unauthenticated access. Multi...

CVE-2020-8592

The CVE-2020-8592 entry concerns eG Manager 7.1.2, where the Forgot Password path (com.eg.LoginHelperServlet) is vulnerable to SQL Injection via the user parameter. The NVD entry cites a high/critical impact with CVSS v3.1: Network, LOW attack complexity, no privileges required, and high confiden...

CVE-2020-8592

eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...

Google Android Remote Code Execution Vulnerability (CNVD-2019-37947)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in Google Android 7.1.1, 7.1.2, 8.0, 8.1, and 9. The vulnerability stems from a lack of boundary checking in the progra...

Out-of-bounds

In VlcDequantH263IntraBlockSH of vlcdequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.1.1...

Integer overflow

In nfcncifdecoderfparams of nfcncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.1.1...

CVE-2019-2187

In nfcncifdecoderfparams of nfcncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.1.1...

CVE-2019-2184

CVE-2019-2184 affects Android’s Media framework, specifically PV_DecodePredictedIntraDC in dec_pred_intra_dc.cpp. The issue is an out-of-bounds write caused by a missing bounds check, leading to remote code execution with no special privileges required. Exploitation is described as requiring user...

CVE-2019-2173

In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...