1597 matches found
PT-2020-3625
Name of the Vulnerable Software and Affected Versions Grub2 versions prior to 2.04 Description The issue is related to the implementation of the grub cmd initrd and grub initrd init functions in Grub2, which can be exploited by passing a large number of arguments to the initrd command on 32-bit...
openSUSE: Security Advisory for go1.13 (openSUSE-SU-2020:1087-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-9377
D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2020-9377: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2020-14004
An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...
PT-2020-11545
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the avrc pars browsing cmd function of avrc pars tg.cc due to a missing bounds check. This could lead to local information disclosure with no...
CVE-2020-4019
The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability...
PT-2022-8868 · Radare2 +1 · Radare2 +1
Name of the Vulnerable Software and Affected Versions: radare2 affected versions not specified Description: A double free issue was discovered in the cmd info function, located in cmd info.c. This issue could potentially allow modification of unexpected memory locations, leading to a crash...
Plesk/myLittleAdmin - ViewState .NET Deserialization (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule VIEWSTATEGENERATOR = 'CA0B0334'.freeze VIEWSTATEVALIDATIONKEY = "\x5c\x7e\xef\x66\x50\x63\x9d\x2c\xb8\xfa\xa0\xda\x36\xaf\x24\x45\x2d\xcf" ...
CVE-2020-12283
Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL method in cmd/frontend/auth/redirect.go, such as for the //foo//example.com substring...
CVE-2020-12283
Sourcegraph before 3.15.1 is affected by an improper validation in the SafeRedirectURL method (cmd/frontend/auth/redirect.go), leading to a vulnerable authentication workflow (example: //foo//example.com). The issue is tied to the authentication redirect logic and can enable an open redirect/auth...
PT-2020-13094
Name of the Vulnerable Software and Affected Versions Sourcegraph versions prior to 3.15.1 Description The issue is related to a vulnerable authentication workflow due to improper validation in the SafeRedirectURL method. This method, located in cmd/frontend/auth/redirect.go, fails to properly...
CVE-2020-12283: URL Redirection to Untrusted Site
Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL method in cmd/frontend/auth/redirect.go, such as for the //foo//example.com substring...
DeathRansom - A Ransomware Developed In Python, With Bypass Technics, For Educational Purposes
What is a ransomware? A ransomware is malware that encrypts all your files and shows a ransom request, which tells you to pay a set amount, usually in bitcoins BTC, in a set time to decrypt your files, or he will delete your files. How it works? First, the script checks if it's in a sandbox,...
CVE-2017-18691
An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos8890 chipsets software. There are multiple Buffer Overflows in TSP sysfs cmdstore. The Samsung ID is SVE-2016-7500 January 2017...
CVE-2017-18665
An issue was discovered on Samsung mobile devices with M6.0 software. There is a NULL pointer exception in WifiService via adb-cmd, causing memory corruption. The Samsung ID is SVE-2017-8287 June 2017...
CVE-2017-18665: NULL Pointer Dereference
An issue was discovered on Samsung mobile devices with M6.0 software. There is a NULL pointer exception in WifiService via adb-cmd, causing memory corruption. The Samsung ID is SVE-2017-8287 June 2017...
PT-2020-8240
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with M6.0 and N7.0 Exynos8890 chipsets software Description: An issue was discovered in Samsung mobile devices, specifically those with M6.0 and N7.0 software and Exynos8890 chipsets. The problem involves multiple Buffe...
PT-2020-8214
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with M6.0 software Description: An issue was discovered that causes a NULL pointer exception in WifiService via adb-cmd, leading to memory corruption. Recommendations: For Samsung mobile devices with M6.0 software, at t...
