Lucene search
+L

995 matches found

ArchLinux
ArchLinux
added 2021/03/13 12:00 a.m.219 views

[ASA-202103-3] git: arbitrary code execution

Arch Linux Security Advisory ASA-202103-3 ========================================= Severity: Low Date : 2021-03-13 CVE-ID : CVE-2021-21300 Package : git Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1665 Summary ======= The package git before version...

8CVSS7.7AI score0.88644EPSS
SaveExploits5References5
Tenable Nessus
Tenable Nessus
added 2021/03/12 12:00 a.m.35 views

Fedora 33 : git (2021-63fcbd126e)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-63fcbd126e advisory. - Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links...

8CVSS7.9AI score0.88644EPSS
SaveExploits5References2
OSV
OSV
added 2021/03/09 8:15 p.m.38 views

CVE-2021-21300

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive...

7.5CVSS1.4AI score
SaveExploits0References14
Prion
Prion
added 2021/03/09 8:15 p.m.58 views

Design/Logic Flaw

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive...

5.1CVSS7.4AI score0.88644EPSS
SaveExploits5References14Affected Software4
UbuntuCve
UbuntuCve
added 2021/03/09 10:00 a.m.56 views

CVE-2021-21300

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive...

8CVSS6.9AI score0.88644EPSS
SaveExploits5References2
CVE
CVE
added 2021/03/09 12:00 a.m.1054 views

CVE-2021-21300

Summary: CVE-2021-21300 affects Git when cloning into case-insensitive file systems and using certain clean/smudge filters (e.g., Git LFS). A specially crafted repository containing symbolic links and files processed by these filters can cause an unchecked script to run during checkout. Affected ...

8CVSS7.7AI score0.88644EPSS
SaveExploits5References14Affected Software1
zdt
zdt
added 2021/02/23 12:00 a.m.278 views

HFS Http File Server 2.3.x - Remote Command Execution Exploit (3)

Exploit Title: HFS HTTP File Server 2.3.x - Remote Command Execution 3 Google Dork: intext:"httpfileserver 2.3" Exploit Author: Pergyz Vendor Homepage: http://www.rejetto.com/hfs/ Software Link: https://sourceforge.net/projects/hfs/ Version: 2.3.x Tested on: Microsoft Windows Server 2012 R2...

9.8CVSS9.8AI score0.99323EPSS
SaveExploits23
Openbugbounty
Openbugbounty
added 2020/09/21 11:58 a.m.9 views

hfs-berlin.asimut.net Cross Site Scripting vulnerability OBB-1352455

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/08/31 5:33 a.m.11 views

hfs-technik.com Cross Site Scripting vulnerability OBB-1288411

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
SaveExploits0
NVD
NVD
added 2020/06/08 6:15 p.m.30 views

CVE-2020-13432

rejetto HFS aka HTTP File Server v2.3m Build 300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers...

7.5CVSS7.6AI score0.30865EPSS
SaveExploits5References7
Prion
Prion
added 2020/06/08 6:15 p.m.21 views

Design/Logic Flaw

rejetto HFS aka HTTP File Server v2.3m Build 300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers...

5CVSS7.6AI score0.30865EPSS
SaveExploits5References7Affected Software1
CVE
CVE
added 2020/06/08 5:25 p.m.148 views

CVE-2020-13432

The CVE-2020-13432 entry concerns rejetto HFS (HTTP File Server) v2.3m Build 300. The connected docs confirm a remote buffer overflow that, under concurrent HTTP requests with long URIs or long headers, can trigger an invalid-pointer write access violation in hfs.exe, effectively enabling remote ...

7.5CVSS7.5AI score0.30865EPSS
SaveExploits5References7Affected Software1
Cvelist
Cvelist
added 2020/06/08 5:25 p.m.43 views

CVE-2020-13432

rejetto HFS aka HTTP File Server v2.3m Build 300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers...

7.5AI score0.30865EPSS
SaveExploits5References7
Packet Storm
Packet Storm
added 2020/06/08 12:00 a.m.616 views

HFS Http File Server 2.3m Build 300 Buffer Overflow

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/HFS-HTTP-FILE-SERVER-v2.3-REMOTE-BUFFER-OVERFLOW-DoS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.rejetto.com Product HFS Http File Server v2.3m Build 300...

0.6AI score0.30865EPSS
SaveExploits5
zdt
zdt
added 2020/06/08 12:00 a.m.157 views

HFS Http File Server 2.3m Build 300 Buffer Overflow Exploit

HFS Http File Server version 2.3m build 300 suffers from a remote buffer overflow vulnerability that can lead to a denial of service. + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

7.5CVSS0.2AI score0.30865EPSS
SaveExploits5
Veracode
Veracode
added 2020/04/10 1:08 a.m.29 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference flaw was found in the Linux kernel's HFS file system implementation. A local attacker could use this flaw to cause a denial of service by mounting a disk that contains a specially-crafted HFS fil...

2.1CVSS2.6AI score0.00448EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
added 2020/04/10 1:08 a.m.33 views

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as a missing boundary check was found in the Linux kernel's HFS file system implementation. A local attacker could use this flaw to cause a denial of service or escalate their privileges by mounting a specially-crafted disk...

7.2CVSS3.1AI score0.00444EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
added 2020/04/10 12:39 a.m.46 views

Buffer Overflows

The kernel package is vulnerable to buffer overflow. The flaw in the hfsbnoderead function in the HFS file system implementation leads to a denial of service if a user browsed a specially-crafted HFS file system, for example, by running "ls"...

7.8CVSS3.2AI score0.04952EPSS
SaveExploits2References20Affected Software1
Veracode
Veracode
added 2020/04/10 12:30 a.m.28 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as the code for the HFS and HFS Plus HFS+ file systems failed to properly handle corrupted data structures. This could, potentially, lead to a local denial of service...

7.8CVSS2AI score0.02947EPSS
SaveExploits1References32Affected Software1
Veracode
Veracode
added 2020/04/10 12:30 a.m.31 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the HFS Plus HFS+ file system implementation. This could, potentially, lead to a local denial of service when write operations are performed...

7.8CVSS2.1AI score0.03294EPSS
SaveExploits0References21Affected Software1
Rows per page
Query Builder