grub2 buffer overflow vulnerability (CNVD-2021-16927)

grub2 is a Linux system boot program from the GNU community. A security vulnerability exists in grub2 versions prior to 2.06 which identifies a stack buffer overflow vulnerability in grubparsersplitcmdline. No details of the vulnerability are provided at this time...

grub2 缓冲区错误漏洞

grub2 is a Linux system boot program from the GNU community. A security vulnerability exists in grub2 versions prior to 2.06 which identifies a stack buffer overflow vulnerability in grubparsersplitcmdline. No details of the vulnerability are provided at this time...

Prototype Pollution

linux-cmdline is vulnerable to prototype pollution. The vulnerability exists as it was possible to include the proto header in the constructor...

CVE-2020-7704

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

CVE-2020-7704

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

Code injection

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

CVE-2020-7704

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

CVE-2020-7704 Prototype Pollution

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

CVE-2020-7704

The Linux cmdline package (linux-cmdline) is affected by CVE-2020-7704. Versions prior to 1.0.1 are vulnerable to Prototype Pollution via the constructor in its parser for Linux kernel command line arguments. The underlying issue enables pollution of Object.prototype, with potential consequences ...

CVE-2020-7704

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

PT-2020-19727 · Linux · Linux-Cmdline

Name of the Vulnerable Software and Affected Versions: linux-cmdline versions prior to 1.0.1 Description: The issue concerns Prototype Pollution via the constructor in a package that parses Linux kernel command line arguments. Recommendations: For versions prior to 1.0.1, update to version 1.0.1 ...

CVE-2020-7704: Improperly Controlled Modification of Object Prototype Attributes

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

Prototype Pollution

Overview linux-cmdline is a Parser for the Linux kernel command line arguments Affected versions of this package are vulnerable to Prototype Pollution via the constructor. POC: const linuxCmdline = require'linux-cmdline'; linuxCmdline'proto.polluted=true'; console.logpolluted; Details Prototype...

Windows/x64 - WinExec Add-Admin Dynamic Null-Free Shellcode (210 Bytes)

210 bytes small WinExec add-admin dynamic null-free shellcode. // Shellcode Title: WinExec Add-Admin Dynamic Null-Free Shellcode 210 Bytes // Shellcode Author: Bobby Cooke // Date: March 21st, 2020 // Tested on: Windows 10 Home - 1909 x8664, Windows 10 Pro - 1909 x86 // Description: Windows...

CVE-2020-1739

A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from...

CVE-2020-1739: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from...

CVE-2020-1733

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask...

Race condition

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask...

CVE-2020-1733

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask...

CVE-2020-1733

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask...