Google Android elevation of privilege vulnerability (CNVD-2022-65634)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from incorrect programmatic calls to high-level native procedures. An attacker can exploit this vulnerability to gain elevated...

Google Android elevation of privilege vulnerability (CNVD-2022-65633)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an incorrect programmatic call to an advanced native procedure. An attacker can exploit this vulnerability to execute arbitra...

Google Android elevation of privilege vulnerability (CNVD-2022-65642)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from incorrect programmatic calls to high-level native procedures. An attacker can exploit this vulnerability to cause an elevatio...

NetBSD Kernel getkerninfo System Call Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of NetBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the stat...

Cross site request forgery (csrf)

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive requireonce call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server...

arbitrary low level call

Lines of code Vulnerability details Impact An attacker may perform call to an arbitrary address with controlled calldata Proof of Concept File: contracts\DepositHandler.sol: 23 if callee.code.length == 0 revert NotContract; 24: success, returnData = callee.calldata; 25 references: Tools Used vsco...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an incorrect programmatic call to an advanced native procedure. An attacker can exploit this vulnerability to execute arbitra...

Attacker can steal all the wrapped tokens, ether or native currency contained in the ReceiverImplementation contract

Lines of code Vulnerability details Impact since all the functions in the ReceiverImplemention are all designed to be called by DepositBase and AxelarDepositService, why not create a simple modifer to check if msg.sender equals either of the two when a delegatecall or call occurs, like so modifie...

GSD-2022-1004901 i40e: Fix call trace in setup_tx_descriptors

i40e: Fix call trace in setuptxdescriptors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.285 by commit...

GSD-2022-1004843 i40e: Fix call trace in setup_tx_descriptors

i40e: Fix call trace in setuptxdescriptors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.249 by commit...

GSD-2022-1004370 efi/x86: use naked RET on mixed mode call wrapper

efi/x86: use naked RET on mixed mode call wrapper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.57 by commit...

GSD-2022-1004309 i40e: Fix call trace in setup_tx_descriptors

i40e: Fix call trace in setuptxdescriptors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...

GSD-2022-1004148 efi/x86: use naked RET on mixed mode call wrapper

efi/x86: use naked RET on mixed mode call wrapper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.14 by commit...

PT-2022-32916

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.2 through v5.10.123 Description The issue is related to a call trace in setup tx descriptors in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-33024

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.200 Description The issue is related to a call trace in setup tx descriptors in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-33163

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.285 Description The issue is related to a call trace in setup tx descriptors in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-32571

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue is related to a call trace in setup tx descriptors in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-32632

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.57 Description The issue is related to the use of a naked RET on mixed mode call wrapper in efi/x86. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2022-32410

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.14 Description The issue concerns a potential security vulnerability in the Linux Kernel. It involves the use of a naked RET on mixed mode call wrapper in efi/x86. The actual impact and attack plausibility...

PT-2022-33105

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.249 Description The issue is related to a call trace in setup tx descriptors in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...