22601 matches found
PT-2024-36381 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: A logic issue was addressed with improved restrictions. This issue allows an app to potentially overwrite arbitrary files. Recommendations...
UBUNTU-CVE-2024-55566
ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...
CVE-2024-55566: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...
Exploit for Off-by-one Error in F5 Nginx
CVE-2021-23017-POC A security issue in nginx resolver was iden...
Tenda AC6V2 Stack Buffer Overflow Vulnerability
Tenda AC6V2 is a wireless router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda AC6V2. The vulnerability stems from insufficient checking of the length or boundaries of input data to overwrite adjacent memory areas. An attacker could use this vulnerability to execute...
CVE-2018-9402
In multiple functions of glproc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel...
CVE-2018-9402
In multiple functions of glproc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel...
CVE-2018-9402
In multiple functions of glproc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel...
CVE-2024-54132
Summary: CVE-2024-54132 affects GitHub CLI (gh). When a user downloads a GitHub Actions workflow artifact named .. using gh run download, the artifact name and the --dir value determine the extraction path, causing files within the artifact to be extracted one directory higher than intended. This...
CVE-2024-54132 GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability
The GitHub CLI is GitHub’s official command line tool. A security vulnerability has been identified in GitHub CLI that could create or overwrite files in unintended directories when users download a malicious GitHub Actions workflow artifact through gh run download. This vulnerability stems from ...
CVE-2024-54132
The GitHub CLI is GitHub’s official command line tool. A security vulnerability has been identified in GitHub CLI that could create or overwrite files in unintended directories when users download a malicious GitHub Actions workflow artifact through gh run download. This vulnerability stems from ...
kernel: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
A vulnerability was found in the Linux kernel in the csdsp firmware involving the V2 algorithm headers and the wmfw V2 format, which introduced variable-length strings into the algorithm block header. This means the overall header length is variable and without proper checks can result in an...
PT-2024-10668 · Google · Android +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a buffer overwrite in multiple functions of gl proc.c due to a missing bounds check. This could potentially lead to escalation o...
PT-2024-36396
Name of the Vulnerable Software and Affected Versions socat versions prior to 1.8.0.2 Description The issue is related to the readline.sh file in socat, which relies on the /tmp/$USER/stderr2 file. This can lead to an arbitrary file overwrite via a predictable /tmp directory. Recommendations For...
CVE-2024-54132: Improper Limitation of a Pathname to a Restricted Directory
The GitHub CLI is GitHub’s official command line tool. A security vulnerability has been identified in GitHub CLI that could create or overwrite files in unintended directories when users download a malicious GitHub Actions workflow artifact through gh run download. This vulnerability stems from ...
LINQPad Deserialization
This module exploits a bug in LIQPad up to version 5.48.00. The bug is only exploitable in paid version of software. The core of a bug is cache file containing deserialized data, which attacker can overwrite with malicious payload. The data gets deserialized every time the app restarts. Module...
CVE-2024-8785 WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability
In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEYLOCALMACHINE\SOFTWARE\WOW6432Node\Ipswitch...
CVE-2024-8785 WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability
In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEYLOCALMACHINE\SOFTWARE\WOW6432Node\Ipswitch...
