7819 matches found
Hitachi Energy Relion 670, 650 and SAM600-IO Series Insufficient Verification of Data Authenticity (CVE-2022-3864)
A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal operation. An attacker could exploit the vulnerability by first gaining access to the system with security privileges and...
SimpleWebServer 2.2-rc2 Denial Of Service Exploit
!/usr/bin/perl use IO::Socket::INET; Exploit Title: PSimpleWebServer 2.2-rc2 - Denial of Service DoS Discovery by: Fernando Mengali Discovery Date: 11 january 2024 Vendor Homepage: http://www.pmx.it/ Download to demo:...
PT-2024-21449
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a blk-mq fix for an IO hang from sbitmap wakeup race. In blk mq mark tag wait, add wait queue may be re-ordered with the following blk mq get driver tag in case o...
PT-2024-12911
exploit 1. CVE-2023-40713: Exploiting GOG Galaxy XPC service for privilege escalation in macOS https://securityintelligence.com/x-force/exploiting-gog-galaxy-xpc-service-privilege-escalation-macos 2. CVE-2023-6560: io uring io uaddr map Dangerous Multi-Page Handling...
CVE-2023-52271
The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any Protected Process Light process via an IOCTL which will be named at a later time...
DEBIAN-CVE-2022-2602
iouring UAF, Unix SCM garbage collection...
CVE-2023-51396
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy.Io Brizy – Page Builder allows Stored XSS.This issue affects Brizy – Page Builder: from n/a through 2.4.29...
Apache Commons IO Vulnerability (CVE-2021-29425)
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path...
PT-2023-9149
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the block layer in the Linux kernel, where there is no check to ensure that the partition length is aligned with the logical block size before adding or resizing ...
kernel: use-after-free in smb2_is_status_io_timeout()
A use-after-free flaw was found in smb2isstatusiotimeout in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region,...
PT-2023-31363 · Unknown · Uptime Kuma
Name of the Vulnerable Software and Affected Versions: Uptime Kuma versions prior to 1.23.9 Description: Uptime Kuma is a self-hosted monitoring tool that uses WebSocket with Socket.io. Prior to version 1.23.9, the application does not verify the source of communication, allowing third-party...
Important: Red Hat Security Advisory: OpenShift Virtualization 4.14.1 security and bug fix update
Red Hat OpenShift Virtualization release 4.14.1 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...
Security Bulletin: IBM Jazz Reporting Service is vulnerable to a remote attacker to traverse directories due to Apache Commons IO (CVE-2021-29425)
Summary A vulnerability has been identified in the Apache Commons IO library, which is included in IBM® Jazz Reporting Service. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2021-29425 DESCRIPTION: Apache Commons IO could allow a remote attacker to traverse...
PT-2023-8119
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix stream read generic on the socket that the SKB i...
USN-6533-1 linux-oem-6.1 vulnerabilities
Tom Dohrmann discovered that the Secure Encrypted Virtualization SEV implementation for AMD processors in the Linux kernel contained a race condition when accessing MMIO registers. A local attacker in a SEV guest VM could possibly use this to cause a denial of service system crash or possibly...
CVE-2023-33070
Transient DOS in Automotive OS due to improper authentication to the secure IO calls...
Authentication flaw
Transient DOS in Automotive OS due to improper authentication to the secure IO calls...
CVE-2023-33070
CVE-2023-33070 describes a Transient DOS in Automotive OS caused by improper authentication to secure IO calls. Affected component: Automotive OS' secure IO interface; root cause is improper authentication enabling local access to IO calls, leading to availability impact (DoS). According to conne...
