244 matches found
CVE-2024-23897
Jenkins File Read Vulnerability - CVE-2024-23897 CVE-2024-23897 is a critical vulnerability in Jenkins that allows unauthenticated attackers to read arbitrary files on the Jenkins controller's file system. This flaw arises from improper handling of command arguments in the args4j library,...
Dnstracer-1.9-Fix
Dnstracer-1.9-Fix dnstracer dnstracer determines where a given Domain Name Server DNS gets its information from for a given hostname, and follows the chain of DNS servers back to the authoritative answer. Problem Stack-based buffer overflow in dnstracer through 1.9 allows attackers to execute...
CVE-2024-1112
CVE-2024-1112 Это PoC, который я написал для уязвимости переполнения кучи в "ResHacker.exe". Использование Выполните CVE-2024-1112.py, скопируйте всю строку из созданного payload.txt, затем используйте её как параметр для открытия ResHacker.exe root@kitploit: ResHacker.exe $string ПРИМЕЧАНИЕ: Не...
Linux Distros Unpatched Vulnerability : CVE-2026-92745
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat...
CVE-2026-92745
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...
DEBIAN-CVE-2026-92745
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...
EUVD-2026-83261
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine VM credentials, such as rootPassword and userPassword. This occurs when the installmachine.py script passes these credentials as...
EUVD-2026-83260
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...
CVE-2026-92745 Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process arguments
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...
CVE-2026-4631-cockpit-RCE
CVE-2026-4631 — Анализ кода Cockpit: Неаутентифицированное удалённое выполнение кода через внедрение аргументов командной строки SSH...
...[ More ]
A stack-based buffer overflow vulnerability exists in the htpasswd utility bundled with thttpd. The vulnerability occurs due to unsafe copying of a user-supplied command-line argument into a fixed-size stack buffer without proper bounds checking.Specifically, the program copies the username...
EUVD-2026-67040
In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...
CVE-2026-31217
The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 allows arbitrary code execution. When a user supplies a directory path via the --model command-line argument, the function reads a module.py file from...
EUVD-2016-10831
yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the...
CVE-2016-20038
yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the...
CVE-2016-20038
CVE-2016-20038 affects yTree 1.94-1.1 and is caused by a stack-based buffer overflow triggered by an excessively long command-line argument. This allows a local attacker to execute arbitrary code by injecting shellcode and a crafted return address to overwrite the stack. Exploitation is described...
CVE-2016-20038 yTree 1.94-1.1 Stack-Based Buffer Overflow
yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the...
CVE-2005-1395
Buffer overflow in Ce/Ceterm aka ARPUS/Ce 2.5.4 and earlier may allow local users to gain privileges via a long 1 XAPPLRESLANGPATH or 2 XAPPLRESDIR environment variable, or 3 command line argument...