Lucene search
+L

4208 matches found

Kitploit
Kitploit
•added 2021/01/27 8:30 p.m.•53 views

SharpEDRChecker - Checks Running Processes, Process Metadata, DLLs Loaded Into Your Current Process And The Each DLLs Metadata, Common Inst all Directories, Installed Services And Each Service Binaries Metadata, Installed Drivers And Each Drivers Metadata, All For The Presence Of Known Defensive Products Such As AV's, EDR's And Logging Tools

New and improved C Implementation of Invoke-EDRChecker. Checks running processes, process metadata, Dlls loaded into your current process and each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for...

7.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/01/18 12:00 a.m.•3 views

PT-2021-3960

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 12 SP3 clone-master-clean-up versions 1.6-4.6.1 and prior versions SUSE Linux Enterprise Server 15 SP1 clone-master-clean-up versions 1.6-3.9.1 and prior versions openSUSE Factory clone-master-clean-up versions...

7.1CVSS5.9AI score0.00296EPSS
SaveExploits1References14
The Hacker News
The Hacker News
•added 2021/01/08 4:56 p.m.•22 views

New Attack Could Let Hackers Clone Your Google Titan 2FA Security Keys

Hardware security keys—such as those from Google and Yubico—are considered the most secure means to protect accounts from phishing and takeover attacks. But a new research published on Thursday demonstrates how an adversary in possession of such a two-factor authentication 2FA device can clone it...

4.2CVSS6.1AI score0.002EPSS
SaveExploits1
Cvelist
Cvelist
•added 2021/01/07 3:07 p.m.•56 views

CVE-2021-3011

An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...

4.8AI score0.002EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/01/06 12:00 a.m.•91 views

Mozilla Rust rocket crate competitive conditions issue vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A contention condition issue vulnerability exists in rocket crate in versions of Mozilla Rust prior to 0.4.5, which stems from LocalRequest::clone creating multiple mutable references to the same object, which c...

8.1CVSS6.5AI score0.00969EPSS
SaveExploits1References1
osv_rustsec
osv_rustsec
•added 2020/12/31 12:00 p.m.•33 views

RUSTSEC-2020-0132 `FixedCapacityDequeLike::clone()` can cause dropping uninitialized memory

Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided T::clone panics in FixedCapacityDequeLike::clone. This causes memory corruption...

9.8CVSS9.5AI score0.01119EPSS
SaveExploits0References3
RustSec
RustSec
•added 2020/12/31 12:00 p.m.•27 views

`FixedCapacityDequeLike::clone()` can cause dropping uninitialized memory

Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided T::clone panics in FixedCapacityDequeLike::clone. This causes memory corruption...

9.8CVSS5.5AI score0.01119EPSS
SaveExploits0Affected Software1
Prion
Prion
•added 2020/12/31 10:15 a.m.•24 views

Design/Logic Flaw

An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly causing a data race...

6.8CVSS8AI score0.00969EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2020/12/31 8:26 a.m.•4 views

CVE-2020-35882

An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly causing a data race...

9.2CVSS0.00969EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2020/12/31 12:00 a.m.•18 views

Rust rocket crate 竞争条件问题漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A contention condition issue vulnerability exists in rocket crate in versions of Mozilla Rust prior to 0.4.5, which stems from LocalRequest::clone creating multiple mutable references to the same object, which c...

8.1CVSS5.8AI score0.00969EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/31 12:00 a.m.•7 views

CVE-2020-35882: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly causing a data race...

8.1CVSS5.8AI score0.00969EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/12/31 12:00 a.m.•1 views

PT-2020-17633

Name of the Vulnerable Software and Affected Versions array-tools crate versions prior to 0.3.2 Description An issue in the array-tools crate causes memory corruption due to the drop of uninitialized memory when T::clone panics in FixedCapacityDequeLike::clone. This occurs because affected versio...

9.8CVSS0.01119EPSS
SaveExploits0References8
osv_ghsa
osv_ghsa
•added 2020/12/18 6:23 p.m.•86 views

GHSA-45Q2-34RF-MR94 Code Injection in mquery

lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property e.g., proto can be copied during a merge or clone operation...

5.3CVSS5.8AI score0.01041EPSS
SaveExploits0References2
osv_rustsec
osv_rustsec
•added 2020/12/18 12:00 p.m.•48 views

RUSTSEC-2020-0127 SyncRef's clone() and debug() allow data races

Affected versions of this crate unconditionally implement Sync for SyncRef. This definition allows data races if &T is accessible through &SyncRef. SyncRef derives Clone and Debug, and the default implementations of those traits access &T by invoking T::clone & T::fmt. It is possible to create da...

8.1CVSS8AI score0.01059EPSS
SaveExploits1References4
RustSec
RustSec
•added 2020/12/18 12:00 p.m.•39 views

SyncRef's clone() and debug() allow data races

Affected versions of this crate unconditionally implement Sync for SyncRef. This definition allows data races if &T is accessible through &SyncRef. SyncRef derives Clone and Debug, and the default implementations of those traits access &T by invoking T::clone & T::fmt. It is possible to create da...

8.1CVSS2.8AI score0.01059EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/12/18 12:00 a.m.•12 views

PT-2020-17627 · Rust · V9 Crate

Name of the Vulnerable Software and Affected Versions: v9 crate through 2020-12-18 Description: An issue was discovered in the v9 crate, where affected versions unconditionally implement Sync for SyncRef. This definition allows data races if &T is accessible through &SyncRef. The SyncRef derives...

8.1CVSS7.8AI score0.01059EPSS
SaveExploits1References10
Veracode
Veracode
•added 2020/12/14 3:25 a.m.•26 views

Prototype Pollution

mquery is vulnerable to prototype pollution. The vulnerability exists as it does not prevent proto, constructor, prototype to be added in a merge or clone operation...

5.3CVSS2.1AI score0.01041EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2020/12/11 7:15 p.m.•61 views

CVE-2020-35149

lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property e.g., proto can be copied during a merge or clone operation...

5.3CVSS5.2AI score0.01041EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/12/11 7:00 p.m.•64 views

CVE-2020-35149

lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property e.g., proto can be copied during a merge or clone operation...

5.2AI score0.01041EPSS
SaveExploits0References1
Mend
Mend
•added 2020/12/11 7:00 p.m.•7 views

CVE-2020-35149

lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property e.g., proto can be copied during a merge or clone operation...

6.9CVSS0.01041EPSS
SaveExploits0References2
Rows per page
Query Builder