Exploit for Out-of-bounds Write in Polkit_Project Polkit

pkexec-exploit Local Privilege Escalation in polkit's pkexec...

Apple多款产品安全特征问题漏洞

Apple tvOS and others are products of Apple Inc.Apple tvOS is an operating system for smart TVs.Apple watchOS is an operating system for smart watches.Apple iPadOS is an operating system for iPad tablets. A vulnerability exists in various Apple products due to a security signature issue, which...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. There is a security vulnerability in xen tha...

Apple macOS ImageIO DDS image out-of-bounds read vulnerability

Summary An out-of-bounds read vulnerability exists in the DDS image parsing functionality of ImageIO library on Apple macOS Big Sur 11.6.1 and iOS 15.1. A specially-crafted DDS file can disclose sensitive memory content which can aid in exploitation of other vulnerabilities. An attacker can deliv...

xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in xen, whic...

UBUNTU-CVE-2022-22637

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior...

vulhub

This is an open-source collection of vulnerable web applications and environments, designed for security training and testing. The repository contains a variety of applications, including web servers, databases, and other services, each with its own set of vulnerabilities. The goal is to provide ...

Vulnerability of operating systems tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser, related to type confusion errors, allowing attackers to execute arbitrary code.

Vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser are related to type confusion errors. Exploiting these vulnerabilities can allow attackers to execute arbitrary code during the processing of malicious web content...

Vulnerability of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser, related to the use of memory after it is freed, allowing a hacker to execute arbitrary code.

Vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser are related to the use of memory after it is freed. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code during the processing of malicious web content from a remo...

The vulnerability of the HTTP Protocol Stack of Microsoft Windows operating systems arises from the possibility of operations going beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HTTP Protocol Stack in Microsoft Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vulnerability of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser, related to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser are caused by a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code upon processing malicious web content...

The vulnerability of the Active Directory Federation Services (AD FS) for Windows operating systems allows a perpetrator to circumvent security restrictions and enhance their privileges.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and increase their privileges...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for...

PT-2022-1530 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows AppContracts API Server with privilege license and access control issues. The following products and editions are affected:Windows 10 Version...

Domain Escalation – sAMAccountName Spoofing

Computer accounts have the $ sign appended at the end of their names in contrast with standard user accounts. By default Microsoft operating systems lack… Continue reading - Domain Escalation - sAMAccountName Spoofing...

The vulnerability of the GDI+ graphic library in Microsoft Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the GDI+ graphics library in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

vulhub

This is an open-source collection of vulnerable systems and applications for educational purposes. The repository is maintained by phith0n and is available on GitHub. It contains a variety of vulnerable systems and applications, including web applications, databases, and operating systems. The...

vulhub

This is an open-source collection of vulnerable web applications and environments for security research and training. It is a repository of vulnerable systems, including web applications, databases, and other software, designed to help security professionals and researchers practice and improve...

The vulnerability of the P2MP communication technology’s implementation in Junos operating systems and Junos OS Evolved allows a attacker to trigger an emergency shutdown of the application.

The vulnerability of the P2MP communication technology in Junos operating systems and Junos OS Evolved lies in buffer out-of-buffer writing. Exploiting this vulnerability can allow a malicious actor to cause an application to terminate abnormally due to a failure in the RPD process...