1619 matches found
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
CVE-2024-50379 Exploitation and POC This repository contains...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
CVE-2024-50379 Exploitation and POC This repository contains...
CVE-2024-50379
A flaw was found in Tomcat. A Time-of-check Time-of-use TOCTOU race condition occurs during JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. This vulnerability allows an uploaded file to be treated as a JSP and executed, resulting in remote code...
UBUNTU-CVE-2024-50379
Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write non-default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from...
CVE-2024-50379
Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write non-default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from...
Apache Tomcat 11.0.0.M1 < 11.0.2 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 11.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.2security-11 advisory. - Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat...
Apache Tomcat 10.1.0.M1 < 10.1.34 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 10.1.34. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.34security-10 advisory. - Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomc...
PT-2024-70: Buffer Overflow in Suricata
The vulnerability was identified in Suricata versions 7.0.7 and below. Failure to check the input file size may result in a buffer overflow. Possible consequences of exploiting the vulnerability include an attacker gaining remote access to configuration files, injection a malicious BPF file into...
CVE-2024-53289
Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2024-53289
Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2024-53289
CVE-2024-53289 affects Dell ThinOS version 2408, describing a Time-of-check Time-of-use (TOCTOU) race condition that could allow a low-privileged, locally authenticated attacker to achieve Elevation of Privileges. Connected sources corroborate Dell ThinOS 2408 as the affected release and frame th...
Dell ThinOS 安全漏洞
Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS version 2408, which stems from a Time of Check to Time of Use TOCTOU race condition that could allow a low-privileged attacker with local access privileges to exploit the vulnerability, resultin...
Local Privilege Escalation
MLflow is vulnerable to Local Privilege Escalation. The vulnerability is due to excessive directory permissions, allowing a Time-of-Check to Time-of-Use ToCToU attack when the sparkudf MLflow API is called...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition due to excessive...
PYSEC-2024-224
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
Juniper Junos OS Vulnerability (JSA88121)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88121 advisory. - A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to...
K000148650: Intel processor vulnerabilities CVE-2024-22185 and CVE-2024-24985
Security Advisory Description CVE-2024-22185 Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-24985 Exposure of resource to wrong sphere in some IntelR processor...
CVE-2024-22185
Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...
FreeBSD : FreeBSD -- Multiple issues in the bhyve hypervisor (eb5c615d-a173-11ef-9a62-002590c1f29c)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the eb5c615d-a173-11ef-9a62-002590c1f29c advisory. Several vulnerabilities were found in the bhyve hypervisor's device models. The NVMe driver...