kernel: use-after-free in the TEE subsystem

A use-after-free flaw in the Linux kernel TEE Trusted Execution Environment subsystem was found in the way user calls ioctl TEEIOCOPENSESSION or TEEIOCINVOKE. A local user could use this flaw to crash the system or escalate their privileges on the system. If the Linux system non configured with t...

PT-2022-36963

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, identified as a Stack-use-after-return READ 1 issue. The crash involves the grk::WaveletReverse::decompress partial tile functio...

PT-2022-36935

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, identified as a Stack-use-after-return READ 1 issue. The crash involves the std:: 1:: function:: func and...

PT-2022-36928

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, identified as a Stack-use-after-scope WRITE 1 issue. The crash involves the grk::WaveletReverse::decompress partial tile functio...

Number withdrawal

Laravel, a web application framework from the Laravel Team Laravel, has a security vulnerability that stems from a vulnerability in 1 RoutingPendingResourceRegistration.php via destruct, 2 cal in QueueCapsuleManager.php and 3 the deserialization pop-up chain invoke in...

CVE-2022-22916

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

Remote code execution

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

CVE-2022-22916: Undefined Security Weakness

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

PT-2022-15733

Name of the Vulnerable Software and Affected Versions O2OA version 6.4.7 Description A remote code execution RCE issue was discovered in O2OA via the "/x program center/jaxrs/invoke" API endpoint. Recommendations For O2OA version 6.4.7, consider restricting access to the "/x program...

CVE-2022-23118

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line git at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller...

Linux TEE IOC Open Session Privilege Escalation

The vulnerability of the TEEIOCOPENSESSION or TEEIOCINVOKE system call implementations in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

fastrpc_internal_invoke Heap Buffer Overflow DoS

The vulnerability of the fastrpcinternalinvoke function drivers/misc/fastrpc.c in the Linux kernel is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to execute arbitrary control commands...

LightMe - HTTP Server Serving Obfuscated Powershell Scripts/Payloads

LightMe is a Simple HTTP Server serving Powershell Scripts/Payloads after Obfuscate them and run obfuscation as a service in backgroud in order to keep obfuscate the payloads which giving almost new obfuscated payload on each HTTP request Main Features Obfuscate all powershell files within a...

Dolibarr ERP/CRM 10.0.6 Login Brute Forcer

Exploit Title: Dolibarr ERP/CRM 10.0.6 - Login Brute Force Date:2020-01-18 Exploit Author: Creamy Chicken Soup Vendor Homepage: https://www.dolibarr.org Software Link: https://sourceforge.net/projects/dolibarr/ Version: 10.0.6 Tested on: Windows 10 - 64bit CVE: CVE-2020-7995 function...

NamedPipePTH - Pass The Hash To A Named Pipe For Token Impersonation

This project is a PoC code to use Pass-the-Hash for authentication on a local Named Pipe user Impersonation. There also is a blog post for explanation: https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/ It is heavily based on the code from the projects Invoke-SMBExec.ps1 and RoguePotato. I faced...

Design/Logic Flaw

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

CVE-2020-11298

CVE-2020-11298 affects Qualcomm Snapdragon platforms where non-secure clients can change permissions on shared memory buffers used by the HLOS Invoke Call to the secure kernel. The issue is described as local in scope with potential for elevation of privileges, based on the affected Snapdragon Au...

PT-2021-9306

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue allows non-secure clients to change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel while waiting for a response to a callback or listener...

CVE-2020-11298: Time-of-check Time-of-use (TOCTOU) Race Condition

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Invoke-Stealth - Simple And Powerful PowerShell Script Obfuscator

Invoke-Stealth is a Simple & Powerful PowerShell Script Obfuscator. This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniques. You can use any of them separately, together or all of them sequentially with ease, from Windows or Linux...