CVE-2020-14120

CVE-2020-14120 affects Xiaomi MIUI: a vulnerability in a Xiaomi app caused by missing checksum when third‑party apps pass parameters, enabling attacker‑driven installation of a malicious app that could gain elevated privileges and disrupt normal system services. No specific exploit details or pat...

Microsoft Remote Procedure Call Runtime Remote Code Execution Vulnerability

Microsoft Remote Procedure Call Runtime is a technology used to create distributed client/server programs from Microsoft Corporation USA. The vulnerability can be exploited to execute arbitrary code on the system...

Microsoft Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows is a windowed operating system developed by Microsoft Corporation. Microsoft Windows DNS Server remote code execution vulnerability can be exploited by attackers to execute arbitrary code on the system...

CVE-2022-26358

CVE-2022-26358 affects the Xen hypervisor (IOMMU: RMRR VT-d and Unity Mapping for AMD-Vi). Issues arise when a device with Reserved Memory Regions remains accessible, potentially causing DMA/interrupts to trigger IOMMU faults or memory corruption. Connected advisories document multiple vendors (S...

Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65625)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting.A code execution vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to execute arbitrary code on the system...

Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65025)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting. A code execution vulnerability exists in Bentley MicroStation CONNECT, which could be exploited by an attacker to execute arbitrary code on the system...

Delta Electronics DIAEnergie路径遍历漏洞

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A path traversal...

Remote Code Execution (RCE)

github.com/cri-o/cri-o is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the kernel.corepattern allowing an attacker to achieve container escape and inject maliciously crafted script into the system...

Information Disclosure

paramiko is vulnerable to information disclosure. The vulnerability exists due to lack of sanitization in writeprivatekeyfile parameter in pkey.py which allows a remote attacker to access unauthorized information in system...

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality.

...

TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20074)

A buffer overflow vulnerability exists in TP-LINK TL-WR886N 20190826 version 2.3.8, which stems from the /cloudconfig/routerpost/register function that executes an arbitrary code on the memory An authenticated attacker could use this vulnerability to execute arbitrary code on the system via a...

FreeTAKServer-UI has an unspecified vulnerability

FreeTAKServer-UI is an open source FTS web interface from the FreeTAKTeam team.FreeTAKServer-UI has a security vulnerability that could be exploited by an attacker to place arbitrary files anywhere on the system...

CVE-2022-21819

CVE-2022-21819 affects NVIDIA Jetson Linux distributions. The issue arises from an error in the IOMMU configuration, which may allow an unprivileged attacker with physical access to directly read/write the entire system address space via the PCI bus. Impacts include denial of service, code execut...

Design/Logic Flaw

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon SSSD. This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List CRL configuration or the...

Microsoft Office Visio Remote Code Execution Vulnerability (CNVD-2022-77995)

Microsoft Office is a suite of office software products from Microsoft Corporation USA. Microsoft Office Visio has a remote code execution vulnerability that could be exploited by an attacker to execute arbitrary code on the system...

Microsoft Paint 3D Remote Code Execution Vulnerability

Microsoft Paint 3D is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on the system...

CVE-2021-44626

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/getregverifycode feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

Siemens RUGGEDCOM Series 安全漏洞

Siemens RuggedCom ROS is an operating system used in the RuggedCom family of switches from Siemens, Germany. Siemens RUGGEDCOM ROS has a security vulnerability that could be exploited by attackers to compromise data integrity and security...

CVE-2022-0675

CVE-2022-0675 affects Puppet Firewall module behavior: in IPT-based firewall rules, an unmanaged rule can share the same comment as a manifest rule, causing Puppet to leave the unmanaged rule and still apply the manifest rule, leaving the system in an unsafe state. The issue impacts Linux/OpenSta...

Katoolin3 - Get Your Favourite Kali Linux Tools On Debian/Ubuntu/Linux Mint

Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always keeps its...