Linux kernel resource management error vulnerability (CNVD-2019-41703)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A vulnerability exists in the 'mlx5fpgaconncreatecq' in the drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c file in versions of the Linux kernel prior to 5.3.11...

Memcached Buffer Overflow Vulnerability

Memcached is the United States Brad Fitzpatrick Brad Fitzpatrick software developers of a high-performance distributed memory object caching system. The system by caching data and objects in memory to reduce the number of times to read the database , thus improving the speed of access to the site...

CVE-2019-7546

An issue was discovered in SIDU 6.0. The dbs parameter of the conn.php page has a reflected Cross-site Scripting XSS vulnerability...

CVE-2018-19767

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "PresentSpace.jsp" has reflected XSS via the ConnPoolName and GroupId parameters...

CVE-2018-19765

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-06917)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Rights.jsp' page in Infovista VistaPortal SE version 5.1 build 51029. A remote attacker can exploit this vulnerability to inject arbitrary web script or...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07224)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the EditCurrentUser.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help ...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07221)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the /VPortal/mgtconsole/Import.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by remote attackers to inject arbitrary web script or HTML wit...

Cross-site scripting vulnerability in KingCMS 'conn.php' page

KingCMS is a content management system based on WEB technology. A cross-site scripting vulnerability exists in KingCMS. The /api/conn.php page fails to properly filter user input, allowing an attacker to exploit the vulnerability to build a malicious web page and trick users into parsing it to...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application that utilizes the connlauncher interface...

Oracle: Security Advisory (ELSA-2009-1243)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: bt sco_conninfo infoleak

The scosockgetsockoptold function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCOCONNINFO option...

Hearing the wind television system registry injection and tasteless of the anti-injection-vulnerability warning-the black bar safety net

Publishing author: LinkEr Affected versions: rapid-wind film and television system Official website: http://www.gxwglm.com Vulnerability type: SQL injection Vulnerability description: news air television system there is more thanSQL injectionvulnerabilities. 1. Register at injection:...

Linux Kernel <= 2.6.28.3 set_selection() UTF-8 Off By One Local Exploit

No description provided by source. / CVE-2009-1046 Virtual Console UTF-8 setselection off-by-onetwo Memory Corruption Linux Kernel = 2.6.28.3 coded by: sgrakkyu at antifork.org http://kernelbof.blogspot.com/2009/07/even-when-one-byte-matters.html Dedicated to all people talking nonsense about non...

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution / Fedora Core 6 exec-shield based Webdesproxy webdesproxy-0.0.1.tgz remote root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

linux/x86 upload & exec 189 bytes

linux/x86 upload & exec 189 bytes. Shellcode exploit for linx86 platform UPLOAD & EXEC SHELLCODE 1 converting asm to hex 2 asm code 3 hex output 4 upload function This is an 'upload and exec' shellcode for the x86 platform. File has to be in executable format, cool if you know the distribution of...