Lucene search
+L

3398 matches found

Kitploit
Kitploit
added 2021/10/17 8:30 p.m.34 views

Fapro - Free, Cross-platform, Single-file mass network protocol server simulator

FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for each protocol. Features Supported Running Modes: Local Machine Virtual Network Supported Protocols:...

7.2AI score
SaveExploits0References4
OSV
OSV
added 2021/09/20 7:53 p.m.12 views

GHSA-FHV8-FX5F-7FXF Prototype Pollution in the merge and clone helper methods

Impact Using merge and clone helper methods in the src/core/util.ts module will have prototype pollution. It will affect the popular data visualization library Apache ECharts, which is using and exported these two methods directly. Patches It has been patched in...

6.2CVSS7AI score0.01391EPSS
SaveExploits0References5
Veracode
Veracode
added 2021/09/20 7:49 a.m.27 views

Prototype Pollution

zrender is vulnerable to prototype pollution. An attacker is able to inject malicious property using merge and clone helper methods in the src/core/util.ts causing prototype pollution via proto...

9.8CVSS3.1AI score0.01391EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/09/17 12:0 a.m.9 views

PT-2021-22477 · Apache · Apache Echarts

Name of the Vulnerable Software and Affected Versions: ZRender versions prior to 5.2.1 Apache ECharts versions prior to 5.2.1 Description: The issue results in prototype pollution when using merge and clone helper methods in the src/core/util.ts module. It affects Apache ECharts, which uses and...

9.8CVSS9.4AI score0.01391EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:0 a.m.10 views

The vulnerability of the clone-master-clean-up.sh utility in the SUSE Linux Enterprise Server operating system allows a hacker to delete any files they desire.

The vulnerability of the clone-master-clean-up.sh utility in the SUSE Linux Enterprise Server operating system is related to errors in link handling. Exploiting this vulnerability could allow a malicious actor to delete any files remotely...

4.8CVSS7AI score0.00296EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2021/09/09 12:0 a.m.7 views

Fedora: Security Advisory for partclone (FEDORA-2021-4dd269a76c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2021/09/07 4:26 p.m.19 views

[SECURITY] Fedora 33 Update: partclone-0.3.17-4.fc33

Partclone provides utilities to clone and restore used blocks on a partition and is designed for higher compatibility of the file system by using existing libraries, e.g. e2fslibs is used to read and write the ext2 partition...

7.2AI score
SaveExploits0
Fedora
Fedora
added 2021/09/04 7:32 p.m.34 views

[SECURITY] Fedora 34 Update: partclone-0.3.17-4.fc34

Partclone provides utilities to clone and restore used blocks on a partition and is designed for higher compatibility of the file system by using existing libraries, e.g. e2fslibs is used to read and write the ext2 partition...

7.2AI score
SaveExploits0
Metasploit
Metasploit
added 2021/08/27 5:42 p.m.78 views

Git LFS Clone Command Exec

Git clients that support delay-capable clean / smudge filters and symbolic links on case-insensitive file systems are vulnerable to remote code execution while cloning a repository. Usage of clean / smudge filters through Git LFS and a case-insensitive file system changes the checkout order of...

8CVSS8.9AI score0.88644EPSS
SaveExploits5
Github Security Blog
Github Security Blog
added 2021/08/25 8:56 p.m.30 views

Use after free in heapless

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed...

7.5CVSS7.3AI score0.01233EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:48 p.m.38 views

Data races in rocket

The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time...

8.1CVSS7.7AI score0.00957EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:48 p.m.65 views

GHSA-8Q2V-67V7-6VC6 Data races in rocket

The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time...

8.1CVSS7.9AI score0.00957EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:44 p.m.38 views

Use after free in string-interner

Affected versions of this crate did not clone contained strings when an interner is cloned. Interners have raw pointers to the contained strings, and they keep pointing the strings which the old interner owns, after the interner is cloned. If a new cloned interner is alive and the old original...

7.5CVSS7.1AI score0.01547EPSS
SaveExploits1References6Affected Software1
Huntr
Huntr
added 2021/08/24 8:52 p.m.6 views

Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

✍️ Description csrf bug to make clone of a role 🕵️‍♂️ Proof of Concept i see everywhere csrf token is checking but during cloning of role, it does not check csrf token .\ Belllow url is vulnerable to csrf attack to make a clone of role...

7AI score
SaveExploits0
OSV
OSV
added 2021/08/08 6:15 a.m.18 views

CVE-2020-36464

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed...

7.5CVSS6.8AI score
SaveExploits0References2
NVD
NVD
added 2021/08/08 6:15 a.m.24 views

CVE-2020-36464

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed...

7.5CVSS0.01233EPSS
SaveExploits1References2
OSV
OSV
added 2021/08/08 6:15 a.m.8 views

CVE-2020-36452

An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone has a drop of uninitialized memory...

9.8CVSS7.3AI score0.01119EPSS
SaveExploits0References2
Prion
Prion
added 2021/08/08 6:15 a.m.14 views

Design/Logic Flaw

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed...

5CVSS7.5AI score0.01233EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/08/08 12:0 a.m.14 views

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A memory corruption vulnerability exists in versions of Mozilla Rust prior to 0.3.2, which stems from Rust's array-tools crate. for fixedcapacitydequelikes:: clone has an uninitialized memory. An attacker could...

9.8CVSS5.7AI score0.01119EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/08/05 12:0 a.m.7 views

PT-2022-7022

Name of the Vulnerable Software and Affected Versions Git versions prior to 2.30.6 Git versions prior to 2.31.5 Git versions prior to 2.32.4 Git versions prior to 2.33.5 Git versions prior to 2.34.5 Git versions prior to 2.35.5 Git versions prior to 2.36.3 Git versions prior to 2.37.4 Description...

5.5CVSS6.2AI score0.01278EPSS
SaveExploits1References98
Rows per page
Query Builder