Lucene search
+L

3648 matches found

zdt
zdt
added 2021/04/16 12:0 a.m.356 views

Linux/x64 - execve(/bin/sh) Shellcode (21 bytes) (2)

Linux/x64 - execve/bin/sh Shellcode 21 bytes Author: s1ege Tested on: x8664 GNU/Linux Shellcode Length: 21 / objdump disassembly 401000: 50 push %rax 401001: 48 31 d2 xor %rdx,%rdx 401004: 48 bb 2f 62 69 6e 2f movabs $0x68732f2f6e69622f,%rbx 40100b: 2f 73 68 40100e: 53 push %rbx 40100f: 54 push...

7.4AI score
SaveExploits0
OSV
OSV
added 2021/04/14 3:3 p.m.48 views

GHSA-4C7M-WXVM-R7GC Improper parsing of octal bytes in netmask

Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs...

9.1CVSS7.1AI score0.16657EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
added 2021/04/14 3:3 p.m.154 views

Improper parsing of octal bytes in netmask

Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs...

9.1CVSS3.7AI score0.16657EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2021/04/14 2:15 p.m.4 views

UBUNTU-CVE-2020-36120

Buffer Overflow in the "sixelencoderencodebytes" function of Libsixel v1.8.6 allows attackers to cause a Denial of Service DoS...

7.5CVSS5.8AI score0.01241EPSS
SaveExploits1References3
NVD
NVD
added 2021/04/14 7:15 a.m.25 views

CVE-2020-36323

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

8.2CVSS0.02025EPSS
SaveExploits0References7
OSV
OSV
added 2021/04/14 7:15 a.m.6 views

ALPINE-CVE-2020-36323

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

8.2CVSS6.9AI score0.02025EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/14 7:15 a.m.28 views

CVE-2020-36323

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

8.2CVSS6.5AI score
SaveExploits0References7
OSV
OSV
added 2021/04/14 7:15 a.m.2 views

DEBIAN-CVE-2020-36323

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

8.2CVSS7.6AI score0.02025EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/14 7:15 a.m.21 views

Design/Logic Flaw

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

6.4CVSS8.4AI score0.02025EPSS
SaveExploits0References7Affected Software2
OSV
OSV
added 2021/04/14 7:15 a.m.8 views

UBUNTU-CVE-2020-36323

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

8.2CVSS7.2AI score0.02025EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/04/14 6:10 a.m.23 views

CVE-2020-36323

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

8.8AI score0.02025EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
added 2021/04/14 6:10 a.m.44 views

CVE-2020-36323

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

8.2CVSS9AI score0.02025EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/04/14 6:10 a.m.30 views

CVE-2020-36323

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

8.2CVSS8.1AI score0.02025EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.5 views

Rust 格式化字符串错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A format string error vulnerability exists in the standard library in versions of Rust prior to 1.52.0, which stems from the fact that if the length of a borrowed string is changed after checking it, it could...

8.2CVSS5.6AI score0.02025EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.8 views

libsixel 缓冲区错误漏洞

Libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in Libsixel version v1.8.6, which stems from a buffer overflow in the sixelencoderencodebytes function, and can be exploited by an...

7.5CVSS6AI score0.01241EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/04/12 12:0 a.m.12 views

PT-2024-11335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the smackfs component in the Linux kernel, where the function smk set cipso does not properly restrict the bytes count. This problem was missed in a previous comm...

7.8CVSS6.5AI score0.00246EPSS
SaveExploits0References47
Cvelist
Cvelist
added 2021/04/07 8:10 p.m.21 views

CVE-2020-36316

In RELIC before 2021-04-03, there is a buffer overflow in PKCS1 v1.5 signature verification because garbage bytes can be present...

5.9AI score0.01159EPSS
SaveExploits1References4
OSV
OSV
added 2021/03/26 9:15 p.m.8 views

CVE-2020-25579

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs5 was failing to zero-fill a pair of padding fields in the dirent structure, resulting in a leak of three uninitialized bytes...

5.3CVSS6.6AI score0.01117EPSS
SaveExploits2References2
OSV
OSV
added 2021/03/26 9:15 p.m.11 views

CVE-2020-25578

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not properly initializing the doff field of the dirent structures returned by VOPREADDIR. In particular, tmpfs5, smbfs5, autofs5...

5.3CVSS6.6AI score
SaveExploits0References2
NVD
NVD
added 2021/03/26 9:15 p.m.15 views

CVE-2020-25578

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not properly initializing the doff field of the dirent structures returned by VOPREADDIR. In particular, tmpfs5, smbfs5, autofs5...

5.3CVSS0.02315EPSS
SaveExploits2References2
Rows per page
Query Builder