CVE-2023-30257

A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root...

JVN#49873988: Secure Boot bypass Vulnerability in PRIMERGY

PRIMERGY is an IA server provided by Fsas Technologies Inc. PRIMERGY contains a vulnerability where Secure Boot function is bypassed. This is due to a vulnerability called "PKFail" CVE-2024-8105, which was publicly disclosed by Binarly. Impact The product's Secure Boot function may be bypassed an...

This Week in Spring - July 23rd, 2024

Hi, Spring fans! It's such an exciting time to be alive! I hope you're doing well. It's nearly the end of July, already! Time is flying and as always the community has not disappointed with their incredible content. Let's dive right into it! have you registered for SpringOne 2024 yet? I love this...

SQL Injection Vulnerability in Crypto M6 Integration Management Platform System of Xiamen Crypto Information Technology Company Limited (CNVD-2024-27112)

Ltd. is an innovative high-tech enterprise dedicated to the research and development of information integration management system. Xiamen Crypto Information Technology Co., Ltd. Crypto M6 Integration Management Platform system suffers from a SQL injection vulnerability, which can be exploited by ...

SQL Injection Vulnerability in Crypto M6 Integration Management Platform System of Xiamen Crypto Information Technology Co.

Ltd. is an innovative high-tech enterprise dedicated to the research and development of information integration management system. Xiamen FSP Information Technology Co., Ltd. FSP M6 integration management platform system has a SQL injection vulnerability, which can be exploited by attackers to...

CVE-2023-30257

A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root...

CVE-2023-30257

A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root...

Buffer overflow

A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root...

CVE-2023-30257

A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root...

CVE-2023-30257

A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root...

CVE-2023-30257

CVE-2023-30257 affects FiiO M6 (Build Number v1.0.4). A buffer overflow in the /proc/ftxxxx-debug component allows local attackers to escalate privileges to root. Connected documents confirm the affected product and root-privilege impact. No remediation or patch details are provided in the availa...

PT-2023-22607

Name of the Vulnerable Software and Affected Versions FiiO M6 version v1.0.4 Description A buffer overflow in the component /proc/ftxxxx-debug allows attackers to escalate privileges to root. Recommendations For FiiO M6 version v1.0.4, consider restricting access to the /proc/ftxxxx-debug compone...

CVE-2023-30257: Buffer Copy without Checking Size of Input

A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root...

FiiO M6 安全漏洞

FiiO M6 is an audio player from the Chinese company FiiO. A security vulnerability exists in FiiO M6 v1.0.4, which originates from a buffer overflow. The vulnerability can be exploited by an attacker to elevate privileges to root...

PoCs-and-Exploits

FiiO LPE Exploit Building on my Crash PoChttps://github.co...

Security Bulletin: IBM QRadar hardware appliances are vulnerable to Intel privilege escalation (CVE-2021-0144)

Summary IBM QRadar hardware appliances are vulnerable to Intel privilege escalation Vulnerability Details CVEID: CVE-2021-0144 DESCRIPTION: Intel Xeon and Intel Core products could allow a local authenticated attacker to gain elevated privileges on the system, caused by insecure default variable...

Apache Tomcat 10.1.0.M1 < 10.1.0.M6

The version of Tomcat installed on the remote host is prior to 10.1.0.M6. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat10.1.0-m6security-10 advisory. - The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to...

Huawei M6 suffers from information leakage vulnerability

Huawei M6 is equipped with flagship Kirin 980 processor, supports 25601600 2K class HD screen and so on. Huawei M6 has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...

JFrog < 7.7.0 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.7.0. It is, therefore, affected by multiple vulnerabilities: - An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did no...

SQL Injection Vulnerability in Kuaipu-M6 Integration Management Platform System of Xiamen Crypto Information Technology Company Limited (CNVD-2021-09667)

Kuaipu-M6 integrated management platform system is a small and medium-sized enterprise integrated management and business application software developed by Xiamen Kuaipu Information Technology Co., Ltd. which has accumulated nearly 15 years of IT operation history and IT management consulting...