Lucene search
K

1130 matches found

0day.today
0day.today
added 2019/06/25 12:0 a.m.189 views

Linux/x86_64 - Reverse(0.0.0.0:4444/TCP) Shell (/bin/sh) Shellcode (70 bytes)

/ Title: Linux/x8664 - Reverse0.0.0.0:4444/TCPShell/bin/sh- Null Free Shellcode ;Author: Aron Mihaljevic ;Architecture: Linux x8664 ;Shellcode Length: 70 bytes ;github = https://github.com/STARRBOY compilation and execution of assembly code ------------------------------------- nasm -felf64...

7.1AI score
Exploits0
Github Security Blog
Github Security Blog
added 2019/06/05 9:24 p.m.36 views

Command Injection in dot

All versions of dot are vulnerable to Command Injection. The template compilation may execute arbitrary commands if an attacker can inject code in the template or if a Prototype Pollution-like vulnerability can be exploited to alter an Object's prototype...

6.2AI score
Exploits0References3Affected Software1
Kitploit
Kitploit
added 2019/05/31 9:43 p.m.291 views

autoPwn - Automate Repetitive Tasks For Fuzzing

Warning Completely re-writing this right now. Focus will be on interactive Linux apps that only take input from stdin for starters. Attempting to use Shellphish's Driller and Fuzzer functionality. autoPwn in it's current state will do this in limited form. Simply run autoPwn ./binary then select...

7.3AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.9 views

Yokogawa A2NN30 Node Unit Detection

Binary data 760040.prm...

7.3AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.2 views

The vulnerability of the IonMonkey JavaScript compiler for Firefox and Firefox ESR browsers lies in a type conversion error, which allows attackers to compromise the integrity of protected data.

The vulnerability of the IonMonkey compiler for Firefox and Firefox ESR browsers lies in a type conversion error when accessing arbitrary objects during compilation. Exploiting this vulnerability allows an attacker to compromise the integrity of protected data locally...

8.8CVSS7.5AI score0.19762EPSS
Exploits6References8Affected Software3
OSV
OSV
added 2019/04/22 4:29 p.m.2 views

DEBIAN-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

9.8CVSS8.6AI score0.01034EPSS
Exploits0References1
OSV
OSV
added 2019/04/22 4:29 p.m.2 views

UBUNTU-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

9.8CVSS6.1AI score0.01034EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2019/04/08 12:0 a.m.22 views

openSUSE Security Update : ntp (openSUSE-2019-1158)

This update for ntp fixes the following issues : Security issue fixed: - CVE-2019-8936: Fixed a NULL pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other isses addressed : - Fixed an issue which caused openSSL mismatch bsc1125401 - Fix...

7.5CVSS6.5AI score0.05726EPSS
Exploits2References3
OPENSUSE Linux
OPENSUSE Linux
added 2019/04/04 12:0 a.m.139 views

Security update for ntp (moderate)

openSUSE Security Update: Security update for ntp Announcement ID: openSUSE-SU-2019:1143-1 Rating: moderate References: 1128525 Cross-References: CVE-2019-8936 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for ntp fixes the...

7.5CVSS7.6AI score0.05726EPSS
Exploits2References1
Exploit DB
Exploit DB
added 2019/04/03 12:0 a.m.72 views

WebKit JavaScriptCore - CodeBlock Dangling Watchpoints Use-After-Free

/ While fuzzing JavaScriptCore, I encountered the following simplified and commented JavaScript program which crashes jsc from current HEAD and release: / function v9 // Some watchpoint on the LexicalEnvironment is triggered here // during the 2nd invocation which jettisons the CodeBlock for v9. ...

7AI score
Exploits0
OSV
OSV
added 2019/03/28 10:56 a.m.8 views

SUSE-SU-2019:0789-1 Security update for ntp

This update for ntp fixes the following issues: Security issue fixed: - CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other isses addressed: - Fixed an issue which caused openSSL mismatch bsc1125401 - Fixed...

7.5CVSS7.4AI score0.05726EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2019/03/28 12:0 a.m.35 views

SUSE SLED15 / SLES15 Security Update : ntp (SUSE-SU-2019:0777-1)

This update for ntp fixes the following issues : Security issue fixed : CVE-2019-8936: Fixed a NULL pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other issues addressed: Fixed several bugs in the BANCOMM reclock driver. Fixed...

7.5CVSS6.6AI score0.05726EPSS
Exploits2References4
OSV
OSV
added 2019/03/27 11:23 a.m.7 views

SUSE-SU-2019:0777-1 Security update for ntp

This update for ntp fixes the following issues: Security issue fixed: - CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other issues addressed: - Fixed several bugs in the BANCOMM reclock driver. - Fixed...

7.5CVSS7.4AI score0.05726EPSS
Exploits2References3
OSV
OSV
added 2019/03/27 10:38 a.m.7 views

SUSE-SU-2019:0775-1 Security update for ntp

This update for ntp fixes the following issues: Security issue fixed: - CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other issues addressed: - Fixed several bugs in the BANCOMM reclock driver. - Fixed...

7.5CVSS7.4AI score0.05726EPSS
Exploits2References3
Exploit DB
Exploit DB
added 2019/03/26 12:0 a.m.123 views

Spidermonkey - IonMonkey Type Inference is Incorrect for Constructors Entered via OSR

/ A bug in IonMonkeys type inference system when JIT compiling and entering a constructor function via on-stack replacement OSR allows the compilation of JITed functions that cause type confusions between arbitrary objects. Prerequisites: 1. Spidermonkey can represent "plain" objects either as...

9.8CVSS10AI score0.19762EPSS
Exploits6
Prion
Prion
added 2019/03/24 2:29 p.m.15 views

Design/Logic Flaw

The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code execution, and display a crafted message to vehicle occupants...

6.8CVSS8.5AI score0.03005EPSS
Exploits0References3
NVD
NVD
added 2019/03/24 2:29 p.m.20 views

CVE-2019-9977

The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code execution, and display a crafted message to vehicle occupants...

8.8CVSS8.6AI score0.03005EPSS
Exploits0References3
Cvelist
Cvelist
added 2019/03/24 1:39 p.m.25 views

CVE-2019-9977

The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code execution, and display a crafted message to vehicle occupants...

8.6AI score0.03005EPSS
Exploits0References3
CVE
CVE
added 2019/03/24 1:39 p.m.37 views

CVE-2019-9977

CVE-2019-9977 affects the Tesla Model 3 entertainment system: the renderer process mishandles JIT compilation, enabling an attacker to trigger firmware code execution and display a crafted message to occupants. Documents across NVD, Red Hat, and CVE listings confirm this issue; CVSS3 base score i...

8.8CVSS8.4AI score0.03005EPSS
Exploits0References3Affected Software1
Exploit DB
Exploit DB
added 2019/03/19 12:0 a.m.73 views

libseccomp < 2.4.0 - Incorrect Compilation of Arithmetic Comparisons

When libseccomp compiles filters for 64-bit systems, it needs to split 64-bit comparisons into 32-bit comparisons because classic BPF can't operate on 64-bit values directly. libseccomp offers both bitwise comparisons NE, EQ, MASKEDEQ and arithmetic comparisons LT, LE, GE, GT. Bitwise comparisons...

7.4AI score
Exploits0
Rows per page
Query Builder