13829 matches found
PT-2020-13061 · Riverbed · Edgeconnect Appliance
Name of the Vulnerable Software and Affected Versions: EdgeConnect appliance affected versions not specified Description: The issue allows an admin user with shell access to retrieve IPSec UDP key material from both machine-to-machine interfaces and human-accessible interfaces. This material can...
haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks
The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return CR, ASCII 0xd, line feed LF, ASCII 0xa, and the zero character NUL, ASCII 0x0, aka Intermediary Encapsulation Attacks...
PT-2020-9208 · Synology · Synology Router Manager
Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.2.3-8017-2 Description: The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via crafted network traffic. This is due to a CR...
Cross-Site Request Forgery Vulnerability in Multiple NETGEAR Products (CNVD-2021-28011)
NETGEAR JNR1010 and others are products of NETGEAR Corporation.NETGEAR JNR1010 is a wireless router.NETGEAR PLW1000 is a power line communication modem.NETGEAR CM400 is a modem. A cross-site request forgery vulnerability exists in multiple NETGEAR products. The vulnerability can be exploited by a...
The vulnerability of the get_line() function in the .fig conversion utility for fig2dev allows a hacker to cause a service failure.
The vulnerability of the getline function in the .fig conversion utility for the fig2dev extension is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created .fig fi...
python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service
In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter...
kernel: Null pointer dereference in the sound/usb/line6/driver.c
A NULL pointer dereference flaw was found in the way the Line 6 POD USB driver in the Linux kernel handled disconnection. This flaw allows an attacker with physical access to the system to crash the system...
kernel: Null pointer dereference in the sound/usb/line6/pcm.c
A NULL pointer dereference flaw was found in the way the LINE6 drivers in the Linux kernel allocated buffers for USB packets. This flaw allows an attacker with physical access to the system to crash the system...
kernel: Null pointer dereference in the sound/usb/line6/pcm.c
A NULL pointer dereference flaw was found in the way the LINE6 drivers in the Linux kernel allocated buffers for USB packets. This flaw allows an attacker with physical access to the system to crash the system...
kernel: Null pointer dereference in the sound/usb/line6/driver.c
A NULL pointer dereference flaw was found in the way the Line 6 POD USB driver in the Linux kernel handled disconnection. This flaw allows an attacker with physical access to the system to crash the system...
exiv2 security, bug fix, and enhancement update
An update is available for libgexiv2, gnome-color-manager, gegl, exiv2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The exiv2 packages provide a command line...
Moderate: exiv2 security, bug fix, and enhancement update
The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 0.27.2. BZ1651917 Security Fixes: exiv2: infinite loop and hang in...
LY Corporation: SSRF restricted to HTTP/HTML on LINE Social Plugins (https://social-plugins.line.me/)
LINE Social Plugins https://social-plugins.line.me/ is a service that provides LINE users with content sharing on the web. This SSRF attack was caused by bypassing the DNS verification of the parameter value received to check the page information of shared content. Attacks were only possible with...
PT-2021-1695
Name of the Vulnerable Software and Affected Versions Sudo versions 1.8.2 through 1.8.31p2 Sudo versions 1.9.0 through 1.9.5p1 Description An off-by-one error in the parse args function leads to a heap-based buffer overflow. This issue allows a local unprivileged user, including the nobody accoun...
CVE-2020-10997
Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table...
CVE-2020-10997
Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table...
CVE-2020-10997
Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table...
Print-My-Shell - Tool To Automate The Process Of Generating Various Reverse Shells
"Print My Shell" is a python script, wrote to automate the process of generating various reverse shells based on PayloadsAllTheThings and Pentestmonkey reverse shell cheat sheets. Using this script you can easily generate various types of reverse shells without leaving your command line. This...
LY Corporation: Path traversal in ZIP extract routine on LINE Android
@kanytu discovered that LINE Keepa file storage service in the LINE App contains an unsafe unzipping pattern, which can potentially be exploited to launch Path traversal attack. The reporter proved that it can lead to overwriting files in the LINE app's private folders under certain conditions by...
