Lucene search
+L

2884 matches found

AlmaLinux
AlmaLinux
•added 2022/05/25 7:43 a.m.•29 views

sos bug fix and enhancement update

The sos package contains a set of utilities that gather information from system hardware, logs, and configuration files. The information can then be used for diagnostic purposes and debugging. Bug Fixes and Enhancements: sos collect fails to get node list from a pacemaker cluster BZ2071695 Tracke...

7AI score
SaveExploits0References1
osv_alba
osv_alba
•added 2022/05/25 7:43 a.m.•34 views

ALBA-2022:4744 sos bug fix and enhancement update

The sos package contains a set of utilities that gather information from system hardware, logs, and configuration files. The information can then be used for diagnostic purposes and debugging. Bug Fixes and Enhancements: sos collect fails to get node list from a pacemaker cluster BZ2071695 Tracke...

6.8AI score
SaveExploits0References1
Huntr
Huntr
•added 2022/05/25 7:23 a.m.•20 views

Null pointer dereference at chafa-pixops.c:95

Description Null pointer dereference in hpjansson/chafa at chafa-pixops.c:95. Build export CFLAGS="-g -O0 -lpthread -fsanitize=address" export CXXFLAGS="-g -O0 -lpthread -fsanitize=address" export LDFLAGS="-fsanitize=address" ./autogen.sh ./configure --disable-shared make POC ./chafa POC POC ASAN...

7AI score
SaveExploits0References1
Fedora
Fedora
•added 2022/05/07 5:06 a.m.•31 views

[SECURITY] Fedora 36 Update: golang-x-debug-0-0.13.20210123gitc934e1b.fc36

This repository holds utilities and libraries for debugging Go programs...

7.5CVSS9.4AI score0.03931EPSS
SaveExploits0
Kitploit
Kitploit
•added 2022/05/03 12:30 p.m.•51 views

FirmWire -b Full-System Baseband Firmware Emulation Platform For Fuzzing, Debugging, And Root-Cause Analysis Of Smartphone Baseband Firmwares

FirmWire is a full-system baseband firmware analysis platform that supports Samsung and MediaTek. It enables fuzzing, root-cause analysis, and debugging of baseband firmware images. See theFirmWire documentation to get started! Experiments & Missing Parts? Upon a vendor's request, the current...

7.1AI score
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2022/05/01 5:47 p.m.•12 views

GHSA-MXH8-XGQ9-W782 MoinMoin Insertion of Sensitive Information into Log File

An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "showtraceback=0" to their site configurations to disable debug tracebacks...

5CVSS5.8AI score0.01361EPSS
SaveExploits0References7
GithubExploit
GithubExploit
•added 2022/04/27 7:57 a.m.•133 views

Exploit for Code Injection in Vmware Spring_Framework

It is an exploit module targeting the Apache Log4j vulnerability...

9.8CVSS7.7AI score0.99638EPSS
SaveExploits109
BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•47 views

NUUO NVRmini NVRsolo PHP Code Execution

The vulnerability of the debuggingcenterutils.php component in NUUO NVRmini and NVRsolo network video recording systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...

10CVSS8.4AI score0.9461EPSS
SaveExploits11References6Affected Software2
CNVD
CNVD
•added 2022/04/25 12:00 a.m.•35 views

Google Android elevation of privilege vulnerability (CNVD-2022-43231)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from the lack of a warning to the user in the TBD of TBD and can be steered using a hidden debugging policy. An attacker could use...

7.8CVSS7.1AI score0.00123EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/04/21 12:00 a.m.•20 views

StarOS Debug Mode Code Execution

The vulnerability of the StarOS operating system exists due to the incorrect activation of the debugging mode for certain services. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.4AI score0.11955EPSS
SaveExploits0References2Affected Software1
Rapid7 Blog
Rapid7 Blog
•added 2022/04/15 6:16 p.m.•26 views

Metasploit Weekly Wrap-Up

Meterpreter Debugging A consistent message Metasploit hears from users is that debugging and general logging support could be improved. The gaps in functionality make it difficult for users to understand what happens when things go wrong and for new and existing developers to fix bugs and add new...

0.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/04/15 12:00 a.m.•21 views

FortiGate Debugging Code Execution

The vulnerability of the FortiGate network firewall’s debugging function for FortiOS operating systems is related to authentication errors. Exploiting this vulnerability allows a perpetrator to execute unauthorized code or commands using certain console command sequences like “print str” and “cmd...

6.2CVSS6.5AI score0.00258EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2022/04/12 5:15 p.m.•16 views

CVE-2021-39794

In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...

7.8CVSS7.3AI score0.00353EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/04/12 5:15 p.m.•16 views

CVE-2021-39794

In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...

7.8CVSS7.2AI score0.00353EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/12 5:15 p.m.•33 views

Design/Logic Flaw

In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...

7.6CVSS7.7AI score0.00353EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/04/12 4:11 p.m.•224 views

CVE-2021-39794

CVE-2021-39794 affects Android 11–12/12L, in the AdbService.java method broadcastPortInfo . The issue is a missing permission check that can allow apps to execute code as the shell user when wireless debugging is enabled, causing local elevation of privilege. Exploitation requires user interactio...

7.8CVSS7.7AI score0.00353EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•14 views

PT-2022-11070

Name of the Vulnerable Software and Affected Versions Android versions Android-11 through Android-12L Description The issue is related to a missing permission check in the broadcastPortInfo of AdbService.java. This could allow apps to run code as the shell user if wireless debugging is enabled,...

7.8CVSS6.1AI score0.00353EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•6 views

CVE-2021-39794: Incorrect Default Permissions

In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...

7.8CVSS7.3AI score0.00353EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/04/11 12:00 a.m.•31 views

PT-2022-13757 · Unknown · Protest Binary

Name of the Vulnerable Software and Affected Versions: protest binary affected versions not specified Description: A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root. The issue is relate...

7.8CVSS7.9AI score0.02211EPSS
SaveExploits1References4
GithubExploit
GithubExploit
•added 2022/04/06 9:40 a.m.•331 views

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

SpringCloud-Gateway Command Execution Vulnerability CVE-2022...

10CVSS7.5AI score0.98253EPSS
SaveExploits56
Rows per page
Query Builder