Lucene search
+L

3385 matches found

Github Security Blog
Github Security Blog
added 2020/11/13 3:47 p.m.61 views

Remote code execution in dependabot-core branch names when cloning

Impact Remote code execution vulnerability in dependabot-common and dependabot-gomodules when a source branch name contains malicious injectable bash code. For example, if Dependabot is configured to use the following source branch name: "/$curl,127.0.0.1", Dependabot will make a HTTP request to...

8.8CVSS8.9AI score0.03062EPSS
SaveExploits1References9Affected Software2
OSV
OSV
added 2020/11/13 3:47 p.m.84 views

GHSA-23F7-99JX-M54R Remote code execution in dependabot-core branch names when cloning

Impact Remote code execution vulnerability in dependabot-common and dependabot-gomodules when a source branch name contains malicious injectable bash code. For example, if Dependabot is configured to use the following source branch name: "/$curl,127.0.0.1", Dependabot will make a HTTP request to...

8.7CVSS8.9AI score0.03062EPSS
SaveExploits1References9
RubySec
RubySec
added 2020/11/13 12:0 a.m.78 views

Remote code execution in dependabot-core branch names when cloning

Impact Remote code execution vulnerability in dependabot-common and dependabot-gomodules when a source branch name contains malicious injectable bash code. For example, if Dependabot is configured to use the following source branch name: "/$curl,127.0.0.1", Dependabot will make a HTTP request to...

8.8CVSS7.6AI score0.03062EPSS
SaveExploits1References1Affected Software1
Kitploit
Kitploit
added 2020/11/11 11:30 a.m.43 views

NFCGate - An NFC Research Toolkit Application For Android

NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security of protocols against traffic modifications. Notice This application was developed for security research purposes by student...

7AI score
SaveExploits0References17
RustSec
RustSec
added 2020/11/02 12:0 p.m.24 views

Use-after-free when cloning a partially consumed `Vec` iterator

The IntoIter Clone implementation clones the whole underlying Vec. If the iterator is partially consumed the consumed items will be copied, thus creating a use-after-free access. A proof of concept is available in the original bug report...

7.5CVSS2.3AI score0.01233EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2020/11/02 12:0 p.m.36 views

RUSTSEC-2020-0145 Use-after-free when cloning a partially consumed `Vec` iterator

The IntoIter Clone implementation clones the whole underlying Vec. If the iterator is partially consumed the consumed items will be copied, thus creating a use-after-free access. A proof of concept is available in the original bug report...

7.5CVSS7.4AI score0.01233EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:0 a.m.12 views

The vulnerability of the Clone function in the GLPI system, which handles requests, incidents, and inventory management of computer equipment, allows a hacker to execute arbitrary SQL commands.

The vulnerability of the Clone function in the GLPI system for requests, incidents, and inventory management is related to the improper elimination of special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

7.5CVSS7.5AI score0.01233EPSS
SaveExploits0References4Affected Software1
Check Point Advisories
Check Point Advisories
added 2020/10/11 12:0 a.m.34 views

FS Thumbtack Clone SQL Injection (CVE-2017-17589; CVE-2017-17576)

An SQL injection vulnerability exists in FS Thumbtack Clone. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.1AI score0.02978EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
added 2020/09/25 7:0 a.m.11 views

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation clone can have a memory-safety issue upon a panic.

...

7.5CVSS7AI score0.01733EPSS
SaveExploits1
Veracode
Veracode
added 2020/09/21 6:28 a.m.21 views

Directory Traversal

cgit is vulnerable to directory traversal. The vulnerability exists in cgitcloneobjects, when enable-http-clone=1 is not turned off...

7.5CVSS3.6AI score0.9288EPSS
SaveExploits7References5Affected Software1
OSV
OSV
added 2020/09/19 9:15 p.m.4 views

DEBIAN-CVE-2020-25794

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a memory-safety issue upon a panic...

7.5CVSS7.3AI score0.01733EPSS
SaveExploits1References1
OSV
OSV
added 2020/09/19 9:15 p.m.5 views

UBUNTU-CVE-2020-25794

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a memory-safety issue upon a panic...

7.5CVSS7.1AI score0.01733EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2020/09/06 12:0 a.m.11 views

PT-2020-16211

Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue was discovered in the sized-chunks crate, where the array size is not checked when constructed with unit, pair, or From in the Chunk implementation. Additionally, the Clone and...

7.5CVSS7AI score0.02841EPSS
SaveExploits6References31
Positive Technologies
Positive Technologies
added 2020/09/06 12:0 a.m.14 views

PT-2020-16213

Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description The issue concerns memory safety in the sized-chunks crate for Rust. Specifically, in the Chunk implementation, the array size is not checked when constructed with From, unit, or pair...

7.5CVSS7AI score0.02841EPSS
SaveExploits6References31
Positive Technologies
Positive Technologies
added 2020/09/06 12:0 a.m.7 views

PT-2020-16212

Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue was discovered in the sized-chunks crate, where the array size is not checked when constructed with unit and pair in the Chunk implementation. Additionally, the array size is not...

7.5CVSS7AI score0.02841EPSS
SaveExploits6References31
Positive Technologies
Positive Technologies
added 2020/09/06 12:0 a.m.10 views

PT-2020-16214

Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue was discovered in the sized-chunks crate, where the Chunk implementation has memory-safety issues. Specifically, the array size is not checked when constructed with unit, pair, or...

7.5CVSS7.1AI score0.02841EPSS
SaveExploits6References31
OSV
OSV
added 2020/09/04 5:31 p.m.13 views

GHSA-QCFF-FFX3-M25C Command Injection in meta-git

All versions of meta-git are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The clone command is vulnerable through the branch name. Recommendation No fix is currently...

8.1AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2020/09/04 5:31 p.m.32 views

Command Injection in meta-git

All versions of meta-git are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The clone command is vulnerable through the branch name. Recommendation No fix is currently...

6.3AI score
SaveExploits0References3Affected Software1
Microsoft Secure
Microsoft Secure
added 2020/08/26 4:0 p.m.45 views

How can Microsoft Threat Protection help reduce the risk from phishing?

Microsoft Threat Protection can help you reduce the cost of phishing The true cost of a successful phishing campaign may be higher than you think. Although phishing defenses and user education have become common in many organizations, employees still fall prey to these attacks. This is a problem...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.8 views

PT-2020-3658 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: A remote code execution issue exists when Visual Studio Code processes environment variables after opening a project. An attacker who successfully exploits this could run arbitra...

9.3CVSS8.2AI score0.03639EPSS
SaveExploits0References5
Rows per page
Query Builder