Realtek Managed Switch Controller (RTL83xx) Stack Overflow

!/usr/bin/python2.7 """ Subject Realtek Managed Switch Controller RTL83xx PoC 2019 bashis https://www.realtek.com/en/products/communications-network-ics/category/managed-switch-controller Brief description 1.Boa/Hydra suffer of exploitable stack overflow with a 'one byte read-write loop' w/o...

PT-2019-4285 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.11 Description: The issue is related to a memory leak in the Linux kernel, specifically in the ath9k wmi cmd function. This memory leak can be exploited by a remote attacker to cause a denial of service due ...

FileThingie 2.5.7 - Arbitrary File Upload

Exploit Title: FileThingie 2.5.7 - Arbitrary File Upload Author: Cakes Discovery Date: 2019-09-03 Vendor Homepage: www.solitude.dk/filethingie Software Link: https://github.com/leefish/filethingie/archive/master.zip Tested Version: 2.5.7 Tested on OS: CentOS 7 CVE: N/A Intro: Easy arbitrary file...

DEBIAN-CVE-2019-15767

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmdload function in frontend/cmd.cc via a crafted chess position in an EPD file...

PT-2019-13911

Name of the Vulnerable Software and Affected Versions eQ-3 Homematic CCU2 and CCU3 versions prior to 1.2.0 AddOn Description The issue allows remote code execution by unauthenticated attackers with access to the web interface. This is because the undocumented script addons/xmlapi/exec.cgi uses CM...

PT-2019-13912

Name of the Vulnerable Software and Affected Versions eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed Description The issue allows for Remote Code Execution by unauthenticated attackers who have access to the web interface. This is possible because the web interface can access the CMD...

Cross site request forgery (csrf)

LayerBB 1.1.3 allows conversations.php/cmd/new CSRF...

CVE-2019-13974

CVE-2019-13974 affects LayerBB 1.1.3 and is a Cross‑Site Request Forgery in conversations.php/cmd/new. The vulnerability stems from insufficient validation of requests from trusted users. CVSS metrics indicate CVSSv3 base score 8.8 (HIGH) with network attack vector, low complexity, no privileges ...

PT-2019-13503

Name of the Vulnerable Software and Affected Versions LayerBB version 1.1.3 Description The issue allows for CSRF in conversations.php/cmd/new. Recommendations For LayerBB version 1.1.3, consider implementing CSRF protection measures, such as token-based validation, to prevent unauthorized reques...

CVE-2019-13974: Cross-Site Request Forgery (CSRF)

LayerBB 1.1.3 allows conversations.php/cmd/new CSRF...

PT-2019-13448

Name of the Vulnerable Software and Affected Versions TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 EU and earlier Description The issue is related to a stack-based buffer overflow in the CMD FTEST CONFIG of the TP-Link Device Debug protocol. This allows a remote...

Nextcloud: Passcode Protection in Android Devices Can be Bypassed.

What is The Vulnerability? The Passcode can be bypassed by calling a MainLoginActivity which is com.owncloud.android.ui.activity.FileDisplayActivity , We have successfully bypassed the passcode and are redirected to the App's User Interface. of the user’s credentials: Android Version: 9 Non Roote...

June 18, 2019—KB4501371 (OS Build 17763.592)

None None...

UBUNTU-CVE-2019-12865

In radare2 through 3.5.1, cmdmount in libr/core/cmdmount.c has a double free for the ms command...

PT-2019-12990

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 3.5.1 Description The issue is related to a double free error in the cmd mount function within libr/core/cmd mount.c, specifically for the ms command. Recommendations For versions prior to 3.5.1, update to a version...

Millions of Linux Servers Under Worm Attack Via Exim Flaw

A widespread campaign is exploiting a vulnerability in the Exim mail transport agent MTA to gain remote command-execution on victims’ Linux systems. Researchers say that currently more than 3.5 million servers are at risk from the attacks, which are using a wormable exploit. Specifically under...

PT-2019-8313

Name of the Vulnerable Software and Affected Versions NETGEAR ReadyNAS Surveillance versions prior to 1.4.3-17 x86 NETGEAR ReadyNAS Surveillance versions prior to 1.1.4-7 ARM Description The issue arises from the fact that the uploaddir variable, obtained from $ GET'uploaddir', is not properly...

IBM Websphere Application Server - Network Deployment Untrusted Data Deserialization Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IBM Websphere Application Server Network Deployment Untrusted Data Deserialization Remote Code Execution', 'Description' = % This module exploits...

IBM Websphere Application Server Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IBM Websphere Application Server Network Deployment Untrusted Data Deserialization Remote Code Execution', 'Description' = % This module exploits...

cmd-resume (>=3.0.72, <=3.1.0) potentially affected by unknown CVE via jquery.terminal (1.4.3)

jquery.terminal NPM version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on jquery.terminal and may be impacted: - cmd-resume =3.0.72, =3.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-2HWP-G4G7-MWWJ...