shadowbroker

This repository, afei00123/shadowbroker, contains a collection of exploits and tools leaked by the Shadow Brokers, a group known for releasing sensitive information. The repository includes a README file that lists the contents of the repository, which includes various exploits and tools, such as...

PT-2021-6126

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.16.10 Description The issue is related to a buffer overflow in the Linux kernel, which can be exploited by a remote attacker to execute arbitrary code. Certain binary files built around 2003, for example with GC...

OPENSUSE-SU-2021:0746-1 Security update for dtc

This update for dtc fixes the following issues: - make all packaged binaries PIE-executables bsc1184122. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:0724-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - make all binaries in position independent bsc1185132. This update was imported from the SUSE:SLE-15-SP2:Update update project...

PT-2021-27345

Name of the Vulnerable Software and Affected Versions: drbd-utils affected versions not specified Description: The issue with drbd-utils involves making all binaries position independent. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

SUSE-SU-2021:1561-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - make all binaries in position independent bsc1185132...

SUSE-SU-2021:1560-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - Hardening: Made all binaries position independent bsc1185132...

SUSE-SU-2021:1559-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - Hardening: Made all binaries position independent bsc1185132...

CVE-2021-22682

Cscape All versions prior to 9.90 SP4 is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to local privilege escalation...

CVE-2021-22682

Cscape All versions prior to 9.90 SP4 is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to local privilege escalation...

CVE-2021-22682: Improper Access Control

Cscape All versions prior to 9.90 SP4 is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to local privilege escalation...

CVE-2021-0255 Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries

A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesystem as root. ethtraceroute is shipped with setuid permissions enabled and is owned by the root use...

Lex Li vscode-restructuredtext access control error vulnerability

Lex Li vscode-restructuredtext is a Lex Li open source application. This extension provides rich reStructuredText language support for Visual Studio Code.An access control error vulnerability exists in versions prior to Lex Li vscode-restructuredtext 146.0.0, which stems from the inclusion of an...

CVE-2021-28793

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

CVE-2021-28793

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

Improper access control

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

CVE-2021-28793

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

CVE-2021-28793

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

CVE-2020-9667

Adobe Genuine Service version 6.6 and earlier is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction...

Path traversal

Adobe Genuine Service version 6.6 and earlier is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction...