447 matches found
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which can be exploited by an attacker to read memory fragments via the Linux kernel's collect syscall to obtain sensitive...
SUSE-SU-2020:2939-1 Security update for crmsh
This update for crmsh fixes the following issues: - Fixed startdelay with start-delaybsc1176569 - fix onfail should be on-failbsc1176569 - config: Try to handle configparser.MissingSectionHeaderError while reading config file - uiconfigure: Obscure sensitive data by defaultbsc1163581 - hbreport:...
PT-2020-21965
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves gc mark grey, gc mark roots, and zend gc collect cycles...
collect-world.com Cross Site Scripting vulnerability OBB-1302197
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-6407
Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to a heap-buffer-overflow in the jmem pools collect empty function of the jmem-poolman.c component in JerryScript. This could allow a remote attacker to access confidential data,...
kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c
A flaw was found in the way the Mellanox 5th generation network adapters ConnectX series core driver in the Linux kernel handled resource cleanup in the mlx5fwfatalreporterdump function. This flaw allows an attacker with the ability to trigger errors in the mlx5crdumpcollect function to crash the...
kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c
A flaw was found in the way the Mellanox 5th generation network adapters ConnectX series core driver in the Linux kernel handled resource cleanup in the mlx5fwfatalreporterdump function. This flaw allows an attacker with the ability to trigger errors in the mlx5crdumpcollect function to crash the...
Linux Gather HexChat/XChat Enumeration
This module will collect HexChat and XChat's config files and chat logs from the victim's machine. There are three actions you may choose: CONFIGS, CHATS, and ALL. The CONFIGS option can be used to collect information such as channel settings, channel/server passwords, etc. The CHATS option will...
fuzzdb-collect
Based on the provided code and context, I will analyze the situation and provide a concise summary. Summary: The provided code appears to be a Python script designed to perform...
AgentSmith-HIDS - Open Source Host-based Intrusion Detection System (HIDS)
Technically, AgentSmith-HIDS is not a Host-based Intrusion Detection System HIDS due to lack of rule engine and detection function. However, it can be used as a high performance 'Host Information Collect Agent' as part of your own HIDS solution. The comprehensiveness of information which can be...
How to compile a server status report by using XenCenter
This article describes how to use XenCenter to collect a server status report...
CVE-2019-3430: Undefined Security Weakness
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...
DEBIAN-CVE-2019-19047
A memory leak in the mlx5fwfatalreporterdump function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service memory consumption by triggering mlx5crdumpcollect failures, aka CID-c7ed6d0183d5...
fuzzdb-collect
Based on the provided code and context, it appears to be a Python script designed to perform a brute-force attack on file extensions. The script is part of...
PT-2019-5265
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.11 Description The issue is related to the mlx5 fw fatal reporter dump function in the Linux kernel, which is associated with an uncontrolled resource consumption, also known as a resource exhaustion issue...
PT-2019-20173
Name of the Vulnerable Software and Affected Versions Donfig version 0.3.0 Description An issue in the collect yaml method in config obj.py allows the execution of arbitrary Python commands, resulting in command execution. Recommendations For Donfig version 0.3.0, consider restricting access to t...
PT-2019-18632
Name of the Vulnerable Software and Affected Versions Donfig version 0.3.0 Description An issue in the collect yaml method in config obj.py allows the execution of arbitrary Python commands, resulting in command execution. Recommendations For Donfig version 0.3.0, consider disabling the collect...
Google Android Remote Code Execution Vulnerability (CNVD-2019-01601)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the 'CollectValuesOrEntriesImpl' function of the elements.cc file in Android. A remote attacker can exploit the vulnerability to...
CVE-2018-9490
In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
