CVE-2022-35978-POC

CVE-2022-35978 POC 설명 CVE-2022-35978는 Minetest 버전 5.5.1 이하에 영향을 미치는 치명적인 보안 취약점입니다. Minetest는 무료 오픈소스 복셀 게임 엔진으로, 쉬운 모딩과 게임 제작을 지원합니다. 싱글 플레이어 모드에서 모드는 메인 메뉴를 표시하기 위해 로드되는 Lua 스크립트를 제어하는 전역 설정을 지정할 수 있습니다. 이 스크립트는 게임 세션을 종료하는 즉시 로드됩니다. 메뉴가 실행되는 Lua 환경은 샌드박싱되지 않아 사용자의 시스템에 직접 간섭할 수 있습니다. 이 문제를 완화하...

Linux Distros Unpatched Vulnerability : CVE-2022-35978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua...

CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

EUVD-2022-38805

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

CVE-2022-35978: Protection Mechanism Failure

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

Input validation

A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform a denial of service DoS attack against an affected system. The vulnerability is due to insufficient validation of user-provided input...

CVE-2018-0462 Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability

A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform a denial of service DoS attack against an affected system. The vulnerability is due to insufficient validation of user-provided input...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2018-10982)

Microsoft Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. An elevation of privilege vulnerability exists in the way the Microsoft Windows Kernel API executes privileges. An attacker could use this vulnerability to emulate a...