PT-2022-11240 · Reolink · Reolink Rlc-410W

Name of the Vulnerable Software and Affected Versions: reolink RLC-410W version 3.0.0.136 20121102 Description: A firmware update issue exists in the 'factory' binary, allowing an attacker to perform arbitrary firmware updates by sending a specially-crafted series of network requests. This can be...

Reolink Rlc-410W Access Control Error Vulnerability

Reolink Rlc-410W is a Wifi security camera from Reolink China.The Reolink RLC-410W in version v3.0.0.13620121102 is vulnerable to an access control error that stems from the device's factory binary not properly restricting access to resources from unauthorized roles. An attacker could exploit the...

Mageia: Security Advisory (MGASA-2020-0112)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-46531

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8d28e. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46537

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x9a30e. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46528

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e. This vulnerability can lead to a Denial of Service DoS...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Precompiled builds for CVE-2021-4034. Of course...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 This is a POC for the vulnerability...

Apache Tomcat < 9.0.58 Multiple Vulnerabilities

Binary data 701385.pasl...

Apache Tomcat < 10.0.16 Multiple Vulnerabilities

Binary data 701386.pasl...

PT-2022-4786 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A buffer overflow vulnerability exists in the GetValue functionality. This issue is related to the copying of a buffer without checking the size of the input data when processing the netctr...

Safari < 15.3 Multiple Vulnerabilities

Binary data 701389.pasl...

Apache Tomcat < 8.5.75 Multiple Vulnerabilities

Binary data 701388.pasl...

Apache Tomcat < 10.1.0-M10 Multiple Vulnerabilities

Binary data 701387.pasl...

CTF-All-In-One

This is a comprehensive guide to CTF Capture The Flag competitions, specifically focusing on the Pwn binary exploitation aspect. The book is written by Yang Cheng, a member of L-Team, and is intended for beginners. It covers the basics of binary exploitation, including memory management, buffer...

Local Privilege Escalation in polkits pkexec

A bug exists in the polkit pkexec binary in how it processes arguments. If the binary is provided with no arguments, it will continue to process environment variables as argument variables, but without any security checking. By using the execve call we can specify a null argument list and populat...

GoCD < 21.3.0 Path Traversal (Direct)

Binary data gocdpathtraversal.nbin...

CVE-2021-46239

The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gffree at utils/alloc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46313

Removed by vendor...

CVE-2021-46313

The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function memmoveavxunalignederms . This vulnerability can lead to a Denial of Service DoS...