8707 matches found
ZTE MF910 – An end of life router, running lots of vivacious hidden code
You might be here because you saw our talk at Defcon 27. You might want to watch that for the full rundown! The ZTE MF910 is a really interesting router for reversing, mainly because it’s full of nice debug calls, and underused functionality. Also, it’s never going to get patched, and it’s really...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists in HID debug where a buffer overflow in hiddebugeventsread in drivers/hid/hid-debug.c...
kernel: HID: debug: Buffer overflow in hid_debug_events_read() in drivers/hid/hid-debug.c
A flaw was found in the Linux kernel in the hiddebugeventsread function in the drivers/hid/hid-debug.c file. A lack of the certain checks may allow a privileged user "root" to achieve an out-of-bounds write and thus receiving user space buffer corruption...
The vulnerability of the hiddebugevents_read() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the hiddebugeventsread function in the hid/hid-debug.c driver in the Linux kernel leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...
Remote Code Execution
Apach Solr DataImportHandler is vulnerable to remote code execution RCE. The attack is possible because it allows an attacker to inject arbitrary code through request's dataConfig parameter which is used for setting the whole DIH configuration when using debug mode of the DIH admin screen...
CVE-2019-1010299
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vecdeque::Iter. The attack...
Cross site request forgery (csrf)
In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...
CVE-2019-0193
CVE-2019-0193 affects Apache Solr via the DataImportHandler (DIH) module. The vulnerability arises because DIH can read a request parameter dataConfig containing a DIH configuration, which can include scripts, enabling code injection. The issue is mitigated by requiring enabling the Java system p...
Exploit for CVE-2019-2525
VirtualBox 3D PoCs & exploits Author: @niklasbhttps://t...
CVE-2019-0193
In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request’s “dataConfig” parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...
CVE-2019-14383
J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...
DEBIAN-CVE-2019-14382
DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...
CVE-2019-14383
J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...
CVE-2019-14382
DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...
Authentication flaw
J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...
Authentication flaw
DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...
UBUNTU-CVE-2019-14382
DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...
CVE-2019-14382
DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...
