Exploit for CVE-2023-38820

DLL-Planting-Slack-4.33.73-CVE-2023-38820 DLL Planting in the...

PT-2023-3970 · Unknown · Qvpn Device Client

Name of the Vulnerable Software and Affected Versions: QVPN Device Client versions prior to 2.0.0.1310 QVPN Device Client versions prior to 2.0.0.1316 Description: The issue is related to an insecure library loading vulnerability. If exploited, it could allow local attackers who have gained user...

SUSE CVE-2023-38056

Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authenticated attacker with admin privileges local execution of Code.This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X before 8.0.35...

Input validation

Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authenticated attacker with admin privileges local execution of Code.This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X before 8.0.35...

OTRS Operating System Command Injection Vulnerability

OTRS is an application from OTRS Germany. A service management software. A security vulnerability exists in OTRS versions 7.0.X prior to 7.0.45 and 8.0.X prior to 8.0.35, which stems from incorrect neutralization of commands executed via the OTRS system configuration, allowing any authenticated...

CVE-2023-38056: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authenticated attacker with admin privileges local execution of Code.This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X before 8.0.35...

CVE-2023-30668

Out-of-bounds Write in BuildOemSecureSimLockResponse of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30650

Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code...

CVE-2023-30651

Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code...

PT-2023-22864 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Jul-2023 Release 1 Description: The issue is related to an out-of-bounds write in the BuildOemSecureSimLockResponse function of libsec-ril. This allows a local attacker to execute arbitrary code...

PT-2023-22848 · Unknown · Sysinput Hal Service

Name of the Vulnerable Software and Affected Versions: sysinput HAL service versions prior to SMR Jul-2023 Release 1 Description: The issue is related to an out of bounds read and write in the enableTspDevice function of the sysinput HAL service. This allows local attackers to execute arbitrary...

PT-2023-22847

Name of the Vulnerable Software and Affected Versions sysinput HAL service versions prior to SMR Jul-2023 Release 1 Description The issue is related to an out of bounds read and write in the callrunTspCmdNoRead function of the sysinput HAL service. This allows local attackers to execute arbitrary...

PT-2023-22867

Name of the Vulnerable Software and Affected Versions libsec-ril versions prior to SMR Jul-2023 Release 1 Description The issue is related to an out-of-bounds write in the BuildIpcFactoryDeviceTestEvent of libsec-ril, allowing a local attacker to execute arbitrary code. Recommendations For versio...

PT-2023-22845

Name of the Vulnerable Software and Affected Versions sysinput HAL service versions prior to SMR Jul-2023 Release 1 Description The issue is related to an out of bounds read and write in the callrunTspCmd function of the sysinput HAL service. This allows local attackers to execute arbitrary code...

SUSE CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

Samsung Mobile Devices Buffer Error Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A buffer error vulnerability exists in Samsung Mobile SMR Jul-2023 Release 1 prior to Release 1, which stems from an out-of-bounds read and write issu...

DEBIAN-CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

UBUNTU-CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

CVE-2023-34648

A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the signup.php...

Siemens SIMATIC WinCC security vulnerabilities

SIMATIC WinCC is a supervisory control and data acquisition SCADA system. A local code execution vulnerability exists in Siemens SIMATIC WinCC, which can be exploited by an attacker to inject arbitrary code and escalate privileges...