kernel: Memory corruption due to incorrect socket cloning

A possible memory corruption due to a type confusion was found in the Linux kernel in the skclonelock function in the net/core/sock.c. The possibility of local escalation of privileges cannot be fully ruled out for a local unprivileged attacker...

kernel: Memory corruption due to incorrect socket cloning

A possible memory corruption due to a type confusion was found in the Linux kernel in the skclonelock function in the net/core/sock.c. The possibility of local escalation of privileges cannot be fully ruled out for a local unprivileged attacker...

Hackers Could Steal a Tesla Model S by Cloning Its Key Fob—Again

The same researchers who figured out how to clone a Tesla Model S key fob have done it again, cracking the replacement that was meant to fix the problem...

PT-2019-14843

Name of the Vulnerable Software and Affected Versions string-interner crate versions prior to 0.7.1 string-interner crate versions 0.6.x prior to 0.6.4 Description An issue in the string-interner crate allows attackers to read from memory locations associated with dangling pointers due to a cloni...

PEpper - An Open Source Script To Perform Malware Static Analysis On Portable Executable

An open source tool to perform malware static analysis on P ortable E xecutable Installation eva@paradise:$ git clone https://github.com/Th3Hurrican3/PEpper/ eva@paradise:$ cd PEpper eva@paradise:$ pip3 install -r requirements.txt eva@paradise:$ python3 pepper.py ./malwaredir Screenshot...

NewStart CGSL CORE 5.04 / MAIN 5.04 : git Vulnerability (NS-SA-2019-0047)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has git packages installed that are affected by a vulnerability: - An option injection flaw has been discovered in git when it recursively clones a repository with sub-modules. A remote attacker may configure a malicious...

CVE-2019-10175

A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determine whether the requesting user has permission to access the Persistent Volume Claim PVC in the source namespace. This could allow users to clone any PVC in...

CVE-2019-10175

A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determine whether the requesting user has permission to access the Persistent Volume Claim PVC in the source namespace. This could allow users to clone any PVC in...

PT-2019-11605

Name of the Vulnerable Software and Affected Versions: virt-cdi-cloner version 1.4 Description: A flaw in the containerized-data-importer of virt-cdi-cloner allows users to clone any Persistent Volume Claim PVC in the cluster into their own namespace, effectively granting access to other users'...

CVE-2019-10175: Improper Access Control

A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determine whether the requesting user has permission to access the Persistent Volume Claim PVC in the source namespace. This could allow users to clone any PVC in...

Project iKy - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface

Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Project First of all we want to advice you that we have changed the Frontend from AngularJS to Angular 7. For this reason we left the project with...

CVE-2019-10175

A flaw was found in the containerized-data-importer where the host-assisted cloning feature does not determine whether the requesting user has permission to access the Persistent Volume Claim PVC in the source namespace. This could allow users to clone any PVC in the cluster into their own...

Design/Logic Flaw

An issue was discovered in MantisBT through 1.3.14, and 2.0.0. Using a crafted request on bugreportpage.php modifying the 'mid' parameter, any user with REPORTER access or above is able to view any private issue's details summary, description, steps to reproduce, additional information when cloni...

CVE-2018-9839: Improper Input Validation

An issue was discovered in MantisBT through 1.3.14, and 2.0.0. Using a crafted request on bugreportpage.php modifying the 'mid' parameter, any user with REPORTER access or above is able to view any private issue's details summary, description, steps to reproduce, additional information when cloni...

Design/Logic Flaw

Due to the use of an insecure RFID technology MIFARE Classic, ABUS proximity chip keys RFID tokens of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way...

CVE-2019-9861: Undefined Security Weakness

Due to the use of an insecure RFID technology MIFARE Classic, ABUS proximity chip keys RFID tokens of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way...

PT-2019-2704

Name of the Vulnerable Software and Affected Versions vGate affected versions not specified Description The issue is related to insufficient control of operations in the vSphere environment, allowing the cloning of virtual machines to another vCenter without checking vGate's mandatory access...

CentOS Update for kernel CESA-2019:0512 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: Memory corruption due to incorrect socket cloning

A possible memory corruption due to a type confusion was found in the Linux kernel in the skclonelock function in the net/core/sock.c. The possibility of local escalation of privileges cannot be fully ruled out for a local unprivileged attacker...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...