4615 matches found
PT-2023-36610
Уязвимость функции drm fb helper damage модуля drivers/gpu/drm/drm fb helper.c драйвера инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с ошибкой единичного смещения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
CVE-2023-21087
In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...
PT-2023-17880
Name of the Vulnerable Software and Affected Versions Android versions Android-11 through Android-13 Description An uncaught exception in PreferencesHelper.java may cause the device to get stuck in a boot loop, leading to local persistent denial of service with no additional execution privileges...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that stems from an uncaught exception in the PreferencesHelper.java component, which can be exploited by an attacker to cause the device to get stuck in a boot...
SUSE-SU-2023:1812-1 Security update for podman
This update for podman fixes the following issues: Update to version 4.4.4: libpod: always use direct mapping macos pkginstaller: do not fail when podman-mac-helper fails podman-mac-helper: install: do not error if already installed - podman.spec: Bump required version for libcontainers-common...
Goanywhere Encryption Helper 7.1.1 Remote Code Execution
// Exploit Title: Goanywhere Encryption helper 7.1.1 - Remote Code Execution RCE // Google Dork: title:"GoAnywhere" // Date: 3/26/2023 // Exploit Author: Youssef Muhammad // Vendor Homepage: https://www.goanywhere.com/ // Software Link:...
Goanywhere Encryption helper 7.1.1 - Remote Code Execution Exploit
// Exploit Title: Goanywhere Encryption helper 7.1.1 - Remote Code Execution RCE // Google Dork: title:"GoAnywhere" // Exploit Author: Youssef Muhammad // Vendor Homepage: https://www.goanywhere.com/ // Software Link: https://www.dropbox.com/s/j31l8lgvapbopy3/ga703linuxx64.sh?dl=0 // Version: 7.1...
SUSE SLES12 Security Update : aws-efs-utils.11048 (SUSE-SU-2023:1761-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:1761-1 advisory. - CVE-2022-46174: Fixed potential tlsport selection collision by using state file as tlsport lock file bsc1206737. Tenable has extracted the...
Arbitrary Code Injection
moodle/moodle is vulnerable to Arbitrary Code Injection. The vulnerability is due to the component parameter in the pix function of mustachepixhelper.php because it renders the component parameter twice which allows an attacker to inject and execute malicious code into the system...
[Important] [Security] Virtuozzo ReadyKernel Patch 155.1 for Virtuozzo Hybrid Server 7.5
The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5. Vulnerability id: CVE-2022-3564 3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4 A Bluetooth use-after-free in the Bluetooth...
PT-2023-17782 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to uncaught exceptions in multiple functions of SnoozeHelper.java, which could lead to a failure to persist settings. This might result in a local escalation of...
CVE-2023-28333
The Mustache pix helper contained a potential Mustache injection risk if combined with user input note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS...
UBUNTU-CVE-2023-28333
The Mustache pix helper contained a potential Mustache injection risk if combined with user input note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS...
Code injection
The Mustache pix helper contained a potential Mustache injection risk if combined with user input note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS...
CVE-2023-28333: Improper Control of Generation of Code
The Mustache pix helper contained a potential Mustache injection risk if combined with user input note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS...
CVE-2023-28333 Moodle: pix helper potential mustache code injection risk
The Mustache pix helper contained a potential Mustache injection risk if combined with user input note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS...
CVE-2023-28333
The Mustache pix helper contained a potential Mustache injection risk if combined with user input note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS...
nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution
A flaw was found in nodejs-handlebars, where affected versions of handlebars are vulnerable to arbitrary code execution. The package lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript into the system. This issue is used to...
PT-2023-10179
Name of the Vulnerable Software and Affected Versions twitter-bootstrap-rails Gem for Rails affected versions not specified Description The issue allows for a reflected cross-site scripting XSS attack due to the bootstrap flash helper method not validating input when handling flash messages. This...
Atlassian Jira 8.6.0 < 8.9.2 Disclosure Of Private Project Titles
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 7.0.6 prior to version 7.13.16, 8.0.0 prior to 8.5.7, 8.6.0 prior to 8.9.2 or 8.10.0 prior to 8.10.1. It is, therefore, affected by a vulnerability which allow remote attackers to view...