89 matches found
MAL-2024-2904 Malicious code in pwn (npm)
False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...
GHSA-9P8R-4XP4-GW5W Vyper's `_abi_decode` vulnerable to Memory Overflow
Summary If an excessively large value is specified as the starting index for an array in abidecode, it can cause the read position to overflow. This results in the decoding of values outside the intended array bounds, potentially leading to bugs in contracts that use arrays within abidecode. The...
Malicious code in @gtfobar/pwn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29393b755fc68b86e17f968b750991f19288e7bd3b74adc485ba0ad947aac5ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Theft of Arbitrary Files due to execution of attacker scripts from BashAssociation.kt
Description Tested on Build87 of the Inure application. It was discovered that the application had an exported activity app.simple.inure.activities.association.BashAssociation which accepted intent data via the file scheme + text/x-shellscript mime type and executed the commands contained within...
Covenant 0.5 Remote Code Execution
Exploit Title: Covenant v0.5 - Remote Code Execution RCE Exploit Author: xThaz Author website: https://xthaz.fr/ Date: 2022-09-11 Vendor Homepage: https://cobbr.io/Covenant.html Software Link: https://github.com/cobbr/Covenant Version: v0.1.3 - v0.5 Tested on: Windows 11 compiled covenant Windows...
K11353642: Linux kernel vulnerability CVE-2013-2596
Security Advisory Description Integer overflow in the fbmmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and...
CVE-2022-4349
A vulnerability classified as problematic has been found in CTF-hacker pwn. This affects an unknown part of the file delete.html. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...
CVE-2022-4349
CVE-2022-4349 corresponds to a CSRF vulnerability in CTF-hacker pwn, affecting an unknown part of delete.html. The issue allows remote initiation of cross-site request forgery, with public disclosure of the exploit. The available connected documents consistently mention CSRF in delete.html and do...
CVE-2022-4349 CTF-hacker pwn delete.html cross-site request forgery
A vulnerability classified as problematic has been found in CTF-hacker pwn. This affects an unknown part of the file delete.html. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...
Pwn 跨站请求伪造漏洞
Pwn is an application by the individual developer of H.U.C - White Sea CTF-hacker. Pwn suffers from a security vulnerability that stems from an unknown section of its delete.html file that allows an attacker to implement cross-site request forgery. The attack method is publicly available and can ...
CVE-2022-4349 CTF-hacker pwn delete.html cross-site request forgery
A vulnerability classified as problematic has been found in CTF-hacker pwn. This affects an unknown part of the file delete.html. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...
PT-2022-26941 · Unknown · Ctf-Hacker Pwn
Name of the Vulnerable Software and Affected Versions: CTF-hacker pwn affected versions not specified Description: A problematic vulnerability has been found in CTF-hacker pwn, affecting an unknown part of the file delete.html. The manipulation leads to cross-site request forgery, which can be...
PwnDoc 授权问题漏洞
PwnDoc is a software application. Penetration test report generator. A security vulnerability exists in PwnDoc version 0.5.3, which stems from a vulnerability that could allow a remote attacker to identify valid user account names by exploiting the response time of authentication attempts...
MAL-2022-5535 Malicious code in pwn_module (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac1b1fc3d796666a7cb3a170fa09114f2bfa3a58a9c5406bfb151c9698734ca0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
VMware addresses security flaws discovered during Tianfu Cup Pwn Contest
THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here VMware addressed vulnerabilities in ESXi, Workstation, Fusion, and Cloud Foundation, few months after the discovery of these bugs by participants at Tianfu Cup Pwn Contest. VMware has rated some of these vulnerabilities as...
ELFXtract - An Automated Analysis Tool Used For Enumerating ELF Binaries
ELFXtract is an automated analysis tool used for enumerating ELF binaries Powered by Radare2 and r2ghidra This is specially developed for PWN challenges and it has many automated features It almost displays every details of the ELF and also decompiles its ASM to C code using r2ghidra Decompiling...
writeup
This is a Python script for exploiting a vulnerability in the "Aegis" binary. The script is designed to be used with the "pwn" library, which is a Python library for exploitation. The script starts by setting a debug flag to 1, which means that the script will run in debug mode. If the debug flag...
VMware Fixes Critical Flaw in ESXi Hypervisor
VMware has hurried out fixes for a critical flaw in its ESXi hypervisor, a few weeks after it was found during China’s Tianfu Cup hacking competition. The use-after-free vulnerability CVE-2020-4004 has a CVSS score of 9.3 out of 10, making it critical. It exists in the eXtensible Host Controller...
