PT-2021-26008

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue is related to resource leaks in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-30124

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.12 and fixed in Lin...

PT-2021-30203

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. This problem was introduced in version v4.12 and is fixed in Linux Kernel version v5.14.10. The actual impact and attac...

PT-2021-30031

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2024-11438

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the NFC digital module. The issue arises when the digital send cmd function fails, causing the params variabl...

PT-2024-11437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the NFC digital component. The issue arises when skb is allocated in digital in send sdd req but not freed wh...

PyHook - An Offensive API Hooking Tool Written In Python Designed To Catch Various Credentials Within The API Call

PyHook is the python implementation of my SharpHook project, It uses various API hooks in order to give us the desired credentials. PyHook Uses frida to inject it's dependencies into the target process Supported Processes Process | API Call | Description | Progress ---|---|---|--- mstsc |...

PT-2021-18505

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server affected versions not specified Description The issue could disclose sensitive information when using ADMIN CMD with LOAD or BACKUP. There is no information provided about the...

CVE-2021-40845

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory...

CVE-2021-40845

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory...

CVE-2021-40845: Unrestricted Upload of File with Dangerous Type

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory...

PT-2021-22977

Name of the Vulnerable Software and Affected Versions Zenitel AlphaCom XE Audio Server versions through 11.2.3.10 Description The web part of Zenitel AlphaCom XE Audio Server, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at "php/index.php". Neither the content n...

Protect

A debug functionality in FortiGate may allow a privileged user to execute unauthorized code or commands via specific chains of print str and cmd mem cli commands to, respectively, read and write hexadecimal values to any memory address...

Security update for go1.16 (moderate)

openSUSE Security Update: Security update for go1.16 Announcement ID: openSUSE-SU-2021:1199-1 Rating: moderate References: 1182345 1189162 Cross-References: CVE-2021-36221 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata is now available.Description...

PT-2021-4203

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an uncontrolled resource consumption in the Linux kernel's ccp-ops cryptodriver. It is caused by a memory leak flaw in the ccp run aes gcm cmd function in...

Security update for go1.16 (moderate)

openSUSE Security Update: Security update for go1.16 Announcement ID: openSUSE-SU-2021:2788-1 Rating: moderate References: 1182345 1189162 Cross-References: CVE-2021-36221 Affected Products: openSUSE Leap 15.3 An update that solves one vulnerability and has one errata is now available.Description...

PT-2021-21318

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue concerns a command injection in the set ledonoff function within the adm.cgi binary. This function is accessible with a page parameter value of ledonoff. The led cmd parameter's...

PT-2021-21317

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue concerns a command injection in the set sys cmd function within the adm.cgi binary. This function is accessible when the page parameter is set to sysCMD, allowing the command...

PT-2021-25899

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description A potential buffer overflow issue was discovered in the wl1251 cmd scan function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-29857

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description A potential buffer overflow issue was discovered in the wl1251 cmd scan function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...