UBUNTU-CVE-2023-4237

A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2key module prints out the private key directly to the standard output. This flaw allows an attacker to fetch those keys from the log files, compromising the system's confidentiality, integrity, and availabili...

Command Shell, Reverse SCTP (via python)

Creates an interactive shell via Python, encodes with base64 by design. Compatible with Python 2.6-2.7 and 3.4+. Module Options msf use payload/python/shellreversesctp msf payloadshellreversesctp show actions ...actions... msf payloadshellreversesctp set ACTION msf payloadshellreversesctp show...

SUSE CVE-2014-3672

The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service host disk consumption by writing to stdout or stderr...

SUSE CVE-2019-8323

An issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilitieswithresponse may output the API response to stdout as it is. Therefore, if the API side modifies the response, escape sequence injection may occur...

SUSE CVE-2019-8322

An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to stdout. Therefore, if the response is crafted, escape sequence injection may occur...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Heap-use-after-free in template_execute

Detailed Report: https://oss-fuzz.com/testcase?key=6009092202430464 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x7fc6c87c7ff0 Crash Stat...

PT-2022-36776 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Heap-use-after-free in template_execute

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6507534056030208 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-fr...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5848956248129536 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer:...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Heap-use-after-free in jsmn_parse

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6316490906796032 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-fr...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Heap-use-after-free in jsmn_parse

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5752788755283968 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-fr...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Heap-double-free in flb_pack_state_reset

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5027252376567808 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Heap-use-after-free in cb_stdout_flush

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5605030365888512 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-fr...

PT-2022-36863

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free read crash. The crash occurs in the following functions: cb stdout flush, output pre cb flush, and is trigger...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Heap-use-after-free in cb_stdout_flush

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6476143266496512 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-fr...

CVE-2022-0144

A flaw was found in the ShellJS library when the scripts used the exec function. Local users on the filesystem could take advantage of this as they can read the stdout of the ShellJS process. This issue discloses sensitive information, leading to privilege escalation. This flaw allows an attacker...

Online Railway Reservation System 1.0 - Remote Code Execution Vulnerability

Exploit Title: Online Railway Reservation System 1.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Zachary Asher Vendor Homepage: https://www.sourcecodester.com/php/15121/online-railway-reservation-system-phpoop-project-free-source-code.html Software Link:...

PT-2021-7041

Name of the Vulnerable Software and Affected Versions shelljs affected versions not specified Description The issue is related to Improper Privilege Management in the shelljs function exec, which is associated with insufficient access control. Exploitation of this issue may allow an attacker to...

CVE-2020-10698

A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed jobs which are run from other organizations. Some sensible data can be disclosed. However, critical data should not be disclosed, as it should be protected by the nolog flag when...

CVE-2020-10698

Ansible Tower is affected. The vulnerability allows an attacker to read the stdout of jobs executed from other organizations, enabling partial data disclosure. Affected versions: before 3.6.4, before 3.5.6, and before 3.4.6. Root cause involves exposure of run-time job output via the websocket in...