CVE-2017-20037

A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument c leads to privilege escalation. The attack can be launched remotely...

SICUNET Access Controller 安全漏洞

SICUNET Access Controller is a browser-based access from SICUNET China that allows you to connect your panel to our cloud server. This allows you to access your panel without firewall settings. A security vulnerability exists in SICUNET Access Controller version 0.32-05z, which stems from a...

CVE-2022-31212

A stack-based buffer over-read flaw was found in the dbus-broker package. Dbus-Broker depends on c-uitl/c-shquote to parse the DBus service's Exec line, and if a malicious Exec line is supplied, this can lead to a crash or other undefined behaviors...

ZAngband zangband-data 数字错误漏洞

ZAngband zangband-data is an Angband-based single-player Roguelike game from the ZAngband team. A security vulnerability exists in ZAngband zangband-data version 2.7.5, which stems from the variable fileheader.bfOffBits in src/tk/plat.c that can be contaminated...

PT-2022-18991 · Verbatim · Verbatim Fingerprint Secure Portable Hard Drive +3

Name of the Vulnerable Software and Affected Versions: Verbatim Keypad Secure USB 3.2 Gen 1 Drive versions through 2022-03-31 Verbatim Store 'n' Go Secure Portable HDD GD25LK01-3637-C versions through VER4.0 Verbatim Executive Fingerprint Secure SSD GDMSFE01-INI3637-C versions through VER1.1...

Apple's New Feature Will Install Security Updates Automatically Without Full OS Update

Apple has introduced a Rapid Security Response feature in iOS 16 and macOS Ventura that's designed to deploy security fixes without the need for a full operating system version update. "macOS security gets even stronger with new tools that make the Mac more resistant to attack, including Rapid...

Trojan-Banker.Win32.Banker.agzg MVID-2022-0608 Insecure Permissions

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/ef1e59148c9a902ae5454760aaab73fe.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Banker.Win32.Banker.agzg Vulnerability: Insecure Permissions Description: The malwa...

The vulnerability of Schneider Electric’s automation controllers C-Bus (5500SHAC) and Wiser for C-Bus (5500SHAC) stems from the possibility of inserting commands that allow a malicious actor to execute arbitrary commands on behalf of the superuser.

The vulnerability of Schneider Electric’s automation controllers C-Bus 5500SHAC and Wiser for C-Bus 5500SHAC lies in the possibility of command injection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the superuser...

COM-Hunter - COM Hijacking VOODOO

COM Hijacking VOODOO COM-hunter is a COM Hijacking persistnce tool written in C. This tool was inspired during the RTO course of @zeropointsecltd Features Finds out entry valid CLSIDs in the victim's machine. Finds out valid CLSIDs via Task Scheduler in the victim's machine. Finds out if someone...

Libmobi 缓冲区错误漏洞

Libmobi is a C library . It is used to process documents in the Mobipocket/Kindle MOBI e-book format. A security vulnerability exists in Libmobi versions prior to 0.11, which stems from a buffer over-read in Libmobi...

Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 - Remote Code Execution (RCE)

Exploit Title: Schneider Electric C-Bus Automation Controller 5500SHAC 1.10 - Remote Code Execution RCE Exploit Author: LiquidWorm !/usr/bin/env python3 -- coding: utf-8 -- Schneider Electric C-Bus Automation Controller 5500SHAC 1.10 Remote Root Exploit Vendor: Schneider Electric SE Product web...

CVE-2022-31460

Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value...

CVE-2021-42198

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause Denial of Service...

swftools 代码问题漏洞

Swftools is a set of utilities for working with Adobe Flash files SWF files. swftools 2020-12-22 and earlier versions are vulnerable to a null pointer dereference, which stems from the presence of a NULL pointer dereference in the function traitsparse located in abc.c. An attacker could exploit...

Owl Labs Meeting Owl 访问控制错误漏洞

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Featuring a series of cameras and microphones that capture 360-degree video and audio and automatically focus on the speaker, making meetings more dynamic and inclusive, Owl Labs Meeting Owl version 5.2.0.15 is vulnerable to ...

New XLoader Botnet Version Using Probability Theory to Hide its C&C Servers

An enhanced version of the XLoader malware has been spotted adopting a probability-based approach to camouflage its command-and-control C&C infrastructure, according to the latest research. "Now it is significantly harder to separate the wheat from the chaff and discover the real C&C servers amon...

[SECURITY] Fedora 36 Update: python-ujson-5.3.0-1.fc36

UltraJSON is an ultra fast JSON encoder and decoder written in pure C with bindings for Python...

ASB-A-218836280

In cgroup1parseparam of cgroup-v1.c, there is a possible container breakout due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

kernel: buffer overflow in IPsec ESP transformation code

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat...

fapolicyd: fapolicyd wrongly prepares ld.so path

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...