CVE-2024-27053 wifi: wilc1000: fix RCU usage in connect path

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RCU usage in connect path With lockdep enabled, calls to the connect function from cfg802.11 layer lead to the following warning: ============================= WARNING: suspicious RCU usage 6.7.0-rc1-wt+ 333 N...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a competition between the garbage collector and the connect function previously...

kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c

A use-after-free flaw was found in the Linux kernel's implementation of logical link control and adaptation protocol L2CAP, part of the Bluetooth stack in the l2capconnect and l2capleconnectreq functions. An attacker with physical access within the range of standard Bluetooth transmission could...

CVE-2023-1342

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the ucssconnect function. This makes it possible for unauthenticated attackers to connect the si...

SUSE CVE-2011-1938

Stack-based buffer overflow in the socketconnect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket...

Command Injection

wifey is vulnerable to command injection. The vulnerability exists due to improper input sanitization in the connect function, which allows an attacker to inject maliciously crafted commands into the system...

GHSA-XJ9V-6Q2F-VQHX wifey vulnerable to Command Injection due to improper input sanitization

All versions of the package wifey are vulnerable to Command Injection via the connect function due to improper input sanitization...

Command injection

All versions of the package wifey are vulnerable to Command Injection via the connect function due to improper input sanitization...

CVE-2022-25890

The CVE-2022-25890 entry affects the Node.js package wifey , with a vulnerability in the connect() function that allows Command Injection due to improper input sanitization. Public references (e.g., Snyk, GitHub advisory) show a PoC exploit and indicate a lack of a fixed version, underscoring rea...

npm wifey 安全漏洞

npm wifey is a NodeJS tool for managing wifi from the US company npm. A security vulnerability exists in wifey, which stems from improper cleaning of user input. An attacker can exploit this vulnerability to perform command injection via the connect function...

PT-2023-12829 · Wifey · Wifey

Name of the Vulnerable Software and Affected Versions: wifey affected versions not specified Description: The issue is related to Command Injection via the connect function due to improper input sanitization. This allows for potential exploitation. No information is provided about the estimated...

CVE-2022-25890: Improper Neutralization of Special Elements used in an OS Command

All versions of the package wifey are vulnerable to Command Injection via the connect function due to improper input sanitization...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the connect function due to improper input sanitization. PoC js var wifey = require'wifey'; wifey.init; wifey.connect"ssid": "';touch EXPLOITED;"; Remediation There is no fixed version for wifey. Credit: JHU System...

The vulnerability of the CONNECT function implementation in the MariaDB database management system allows a hacker to execute arbitrary code.

The vulnerability of the CONNECT function implementation in the MariaDB database management system is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

MariaDB 格式化字符串错误漏洞

MariaDB is a free and open source database management system from the MariaDB Mariadb Foundation and a forked version of MySQL with the Maria storage engine. A format string error vulnerability exists in MariaDB due to a format string error in the CONNECT function implementation. A remote user wi...

PT-2021-8149 · Git +5 · Git +5

Name of the Vulnerable Software and Affected Versions: Git versions prior to 2.30.1 Description: The issue is related to the git connect git function in the connect.c component of the Git distributed version control system. It allows a repository path to contain a newline character, which may...

Core FTP LE 2.2 - Denial of Service (PoC)

Exploit Title: Core FTP LE 2.2 - Denial of Service PoC Date: 2020-25-02 Exploit Author: Ismael Nava Vendor Homepage: http://www.coreftp.com/ Software Link: http://www.coreftp.com/download.html Version: 2.2 build 1947 Tested on: Windows 10 Home x64 CVE : n/a STEPS Open the program Core FTP LE In...

PT-2018-1557 · Protonvpn · Protonvpn Vpn Client

Name of the Vulnerable Software and Affected Versions: ProtonVPN VPN client version 1.5.1 Description: A code execution issue exists in the connect functionality of the ProtonVPN VPN client, allowing for privilege escalation. This can be triggered by a specially crafted configuration file, enabli...

UBUNTU-CVE-2016-10130

The httpconnect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable...

CVE-2015-7698

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...