40 matches found
CVE-2020-16012-PoC
M2 Project - Side Channel Attack Client Chrome Version 83 Installation Link https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/756066/ Launch command unzip Linux...chrome.zip cd chrome-linux/ ./chrome --disable-gpu --disable-software-rasterizer...
cURL Session Duration Unauthorized Access
The vulnerability of the software for interacting with servers via cURL is related to an incorrect session duration. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
libcurl Unauthorized Access
The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
libcurl WebSocket DoS
The vulnerability of the WebSocket component in the libcurl library of the cURL software’s server interaction mechanism is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
ROS-20260529-73-0016
The vulnerability of the software for interacting with servers via CURL is related to the exposure of information. Exploiting this vulnerability allows a remote attacker to gain access to confidential data through the PASV response...
cURL Authentication Bypass Privilege Escalation
The vulnerability of the software for interacting with servers via cURL is related to the bypassing of authentication due to a fundamental flaw in the code. Exploiting this vulnerability allows a remote attacker to increase their privileges...
CURL Confidential Data Access
The vulnerability of the software for interacting with servers via CURL is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
JLSEC-2026-472
A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust...
cURL Registration Data Unauthenticated Access
The vulnerability of the software for interacting with servers via cURL is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
libcurl Data Compromise
The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to improper verification of certificate authenticity. Exploiting this vulnerability allows an attacker to compromise the confidentiality of the protected information...
CVE-2025-62320 HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica Platform
HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage. Because of this, an attacker may insert unwanted HTML code into the page. When the browser loads the page, it may automatically interact with external...
cURL Man-in-the-Middle
The vulnerability of the software for interacting with servers via cURL is related to the exchange of keys without authenticating the object. Exploiting this vulnerability allows a remote attacker to perform “man-in-the-middle” attacks...
EUVD-2021-10095
Malware in sbrugna...
EUVD-2024-50583
Malicious code in bioql PyPI...
GHSA-MGFV-2362-JQ96 DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input
DNN.PLATFORM allows a specially crafted series of malicious interaction can expose NTLM hashes to a third party SMB server. This vulnerability is fixed in 10.0.1...
php: Leak partial content of the heap through heap buffer over-read in mysqlnd
A flaw was found in the PHP MySQL client library. This vulnerability allows a hostile MySQL server to disclose the content of the client's heap, potentially exposing data from other SQL requests and other users of the same server via malicious server interactions...
cURL Insufficient Protection Unauthorized Access
The vulnerability of the software for interacting with servers via cURL is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
TFTP Fetch
Fetch and execute an AARCH64 payload from a TFTP server. Module Options msf use payload/cmd/linux/tftp/aarch64/meterpreterreversehttps msf payloadmeterpreterreversehttps show actions ...actions... msf payloadmeterpreterreversehttps set ACTION msf payloadmeterpreterreversehttps show options ...sho...
HTTPS Fetch
Fetch and execute an MIPSLE payload from an HTTPS server. Module Options msf use payload/cmd/linux/https/ppc/meterpreterreversehttps msf payloadmeterpreterreversehttps show actions ...actions... msf payloadmeterpreterreversehttps set ACTION msf payloadmeterpreterreversehttps show options ...show...
K000149702: PostgreSQL vulnerabilities CVE-2024-10977 and CVE-2024-10979
Security Advisory Description CVE-2024-10977 Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application. For example, a man-in-the-middle attacker could send a long error message that a...