33254 matches found
DDexec - A Technique To Run Binaries Filelessly And Stealthily On Linux Using Dd To Replace The Shell With Another Process
In Linux in order to run a program it must exist as a file, it must be accessible in some way through the file system hierarchy this is just how execve works. This file may reside on disk or in ram tmpfs, memfd but you need a filepath. This has made very easy to control what is run on a Linux...
VMware Workspace One Access / VMware Identity Manager Server-side Template Injection RCE (CVE-2022-22954)
Binary data vmwareworkspaceoneaccesscve-2022-22954.nbin...
Rippled blockchain public chain system has a binary vulnerability
Rippled, the underlying blockchain network node program on which the digital currency Ripple XRP relies, suffers from a binary vulnerability in the Rippled blockchain public chain system. The vulnerability is caused by an array out-of-bounds access error in the code, which could be exploited by a...
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
...
Adobe ColdFusion Installed (macOS)
Binary data macosxadobecoldfusioninstalled.nbin...
Adobe After Effects Installed (macOS)
Binary data macosxadobeaftereffectsinstalled.nbin...
CVE-2021-38483
The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation...
Privilege escalation
The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation...
CVE-2021-43986: Improper Access Control
The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation...
CVE-2021-38483: Incorrect Permission Assignment for Critical Resource
The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation...
Apache APISIX HTTP Detection
Binary data apacheapisixhttpdetect.nbin...
radare2 code issue vulnerability (CNVD-2022-31692)
radare2 is a set of libraries and tools for working with binary files. A code issue vulnerability exists in radare2 prior to 5.6.8 that is capable of crashing radare2, thereby affecting system availability. No details of the vulnerability are provided at this time...
Trend Micro Apex Central Management Web Console Detection
Binary data trendmicroapexcentralwebuidetect.nbin...
Design/Logic Flaw
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypa...
CVE-2020-13495
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypa...
CVE-2020-13495: Improper Restriction of Operations within the Bounds of a Memory Buffer
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypa...
ALPINE-CVE-2022-27447
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binarystring::freebuffer at /sql/sqlstring.h...
DEBIAN-CVE-2022-27447
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binarystring::freebuffer at /sql/sqlstring.h...
AZL-9411 CVE-2022-27447 affecting package mariadb for versions less than 10.6.8-1
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binarystring::freebuffer at /sql/sqlstring.h...