1969 matches found
mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure.
A cryptographic protocol integrity flaw was discovered in Apache Mina. The closure of a TLS session would not always result in closure of the socket, allowing the conversation to continue in clear text. This could undermine the confidentiality of a connection and potentially disclose sensitive...
Amovision AM-Q6320-WIFI HD Camera Remote Configuration Disclosure
!/usr/bin/perl Amovision AM-Q6320-WIFI HD Camera Remote Configuration Disclosure Copyright 2020 c Todor Donev https://donev.eu/ Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor...
Unspecified Vulnerability in Oracle Hyperion Financial Close Management
Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial settlement, report production and other functions. An unspecified vulnerability exists in Oracle Hyperion Financial Close Management. An attacker could exploit this...
phpMyChat Plus 1.98 SQL Injection
Title: phpMyChat Plus 1.98 - 'pmcusername' SQL Injection Date: 2020-02-13 Exploit Author: J3rryBl4nks Vendor Homepage: http://ciprianmp.com/latest/ Software Link: https://sourceforge.net/projects/phpmychat/files/phpMyChatPlus/ Version MyChat Plus 1.98 Tested on Windows 10/Kali Rolling The phpMyCh...
The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application allows a perpetrator to gain unauthorized access to modify, add, or delete data.
The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to modify, add, or delete data using the...
CVE-2019-14044
CVE-2019-14044 is an out-of-bounds memory access in an array of pointers during normal camera open/close on Qualcomm Snapdragon platforms (e.g., QCS605, SDM439/630/636/660/SDX24/SDM660). Root cause: use of uninitialized memory segment leading to potential privilege impact. Documented impact is Hi...
UBUNTU-CVE-2020-1700
A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by...
The vulnerability of the i915_ppgtt_close function (drivers/gpu/drm/i915/i915_gem_gtt.c) in Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the i915ppgttclose function drivers/gpu/drm/i915/i915gemgtt.c in Linux kernel systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through the system call to the Intel i915...
Linux kernel post-release reuse vulnerability (CNVD-2020-08114)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. Linux kernel versions 4.14 longterm through 4.14.165, 4.19 longterm through 4.19.96, and 5.x versions prior to 5.2 have a post-release reuse vulnerability in the...
CVE-2020-2563
Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...
CVE-2020-2563
Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...
Design/Logic Flaw
Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...
CVE-2020-2563
Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...
CVE-2020-2563
CVE-2020-2563 affects Oracle Hyperion Financial Close Management, Close Manager component, version 11.1.2.4. The vulnerability is described as network-accessible over HTTP, with the attacker requiring high privileges and user interaction to compromise data integrity (unauthorized create/delete/mo...
CVE-2020-2563
Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...
DEBIAN-CVE-2020-7053
In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 and 5.x before 5.2, there is a use-after-free write in the i915ppgttclose function in drivers/gpu/drm/i915/i915gemgtt.c, aka CID-7dc40713618c. This is related to i915gemcontextdestroyioctl in...
Linux/x64 - Reverse TCP Stager Shellcode (188 bytes)
; Title: Linux/x64 - Reverse TCP Stager Shellcode 188 bytes ; Author: Lee Mazzoleni ; Tested on: Ubuntu 18.04.2 LTS ; reverse tcp stager - download and execute up to 4096 bytes of additional payload - no null bytes in this ; this code is 188 bytes total less if you delete the exit syscall at the...
DEBIAN-CVE-2019-19807
In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to sndtimeropen and sndtimercloselocked. The timeri variable was originally intended to be for a newly created timer instance, but was used for a...
Apache MINA Memory Corruption Vulnerability
Apache MINA is the United States Apache Apache Software Foundation of a web application framework. The product is mainly used to develop high-performance and highly scalable web applications. A security vulnerability exists in Apache MINA versions 2.0.20 and 2.1.0. The vulnerability stems from th...