9 matches found
CVE-2020-8515
CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about. Amusingly, the command injected gets executed twice, see here: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST 2018 armv6l...
DEBIAN-CVE-2026-98540
In the Linux kernel, the following vulnerability has been resolved: fprobe: Terminate the fgraphdata list when the reservation is not filled fprobefgraphentry reserves shadow stack space for every fprobe with an exit handler, but only fills it for those whose entry handler returns 0...
EUVD-2026-103585
In the Linux kernel, the following vulnerability has been resolved: fprobe: Terminate the fgraphdata list when the reservation is not filled fprobefgraphentry reserves shadow stack space for every fprobe with an exit handler, but only fills it for those whose entry handler returns 0...
PT-2026-75918
Impact The validity store treats a transaction with stored block number = X as "in window" only when X last bn - transaction validity window blocks strict inequality. However the protocol's Transaction::is valid at accepts a transaction for inclusion in any block in validity start height - blocks...
PT-2026-76559
Name of the Vulnerable Software and Affected Versions Nimiq versions prior to 1.5.1 Description The validity store uses a strict lower-bound comparison that expires stored transactions too early relative to the Transaction::is valid at function. This occurs because the store treats a transaction...
PT-2025-14014
The Drop implementation will get run twice when using the cursor. This issue does not affect you, if you are using only using the crate with types that are Copy such as u8. This issue also does not affect you, if you are only depending on it through the crate planus...
DEBIAN-CVE-2022-48727
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Avoid consuming a stale esr value when SError occur When any exception other than an IRQ occurs, the CPU updates the ESREL2 register with the exception syndrome. An SError may also become pending, and will be...
PT-2022-7534
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the fixup guest exit function in the arm64 subsystem of the Linux kernel's KVM component. It occurs when an SError is synchronized, and the vcpu-arch.fault.esr el...
