Lucene search
+L

23 matches found

NVD
NVD
•added 2026/07/21 8:17 p.m.•19 views

CVE-2026-59147

Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsufind. The attach-time validator dsuvalidateheader checks the header scalars and region layout against the file size, but does not validate the array contents it then...

9.8CVSS0.00553EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/21 7:05 p.m.•19 views

CVE-2026-59147

Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsufind. The attach-time validator dsuvalidateheader checks the header scalars and region layout against the file size, but does not validate the array contents it then...

5.8AI score0.00553EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/21 7:05 p.m.•34 views

CVE-2026-59147

The Data::DisjointSet::Shared Perl module (versions before 0.02 ) is vulnerable to out-of-bounds reads and writes. The root cause is an unvalidated parent index within the dsu_find function; while the dsu_validate_header validator checks header scalars and region layout against file size, it fail...

9.8CVSS5.8AI score0.00553EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/08 5:16 p.m.•31 views

CVE-2025-48614

In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permission check. This could lead to physical denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

4.6CVSS0.00106EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/08 4:57 p.m.•51 views

CVE-2025-48614

CVE-2025-48614 : Android recovery path bug in rebootWipeUserData (RecoverySystem.java) allows factory reset while in DSU mode due to a missing permission check. This creates a physical denial-of-service risk with no extra privileges and no user interaction needed. Affected: Android framework comp...

4.6CVSS6AI score0.00106EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/08 4:57 p.m.•6 views

CVE-2025-48614

In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permission check. This could lead to physical denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00106EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/08 12:00 a.m.•3 views

CVE-2025-48614: Missing Authorization

In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permission check. This could lead to physical denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

4.6CVSS5.9AI score0.00106EPSS
SaveExploits0References4
OSV
OSV
•added 2025/12/01 12:00 a.m.•21 views

ASB-A-430568718

In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permission check. This could lead to physical denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

4.6CVSS5.9AI score0.00106EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2023/06/06 6:46 p.m.•55 views

dsu.univr.it Cross Site Scripting vulnerability OBB-3398788

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
•added 2023/01/17 7:26 p.m.•14 views

GSD-2023-1001520 perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()

perf: armdsu: Fix hotplug callback leak in dsupmuinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•3 views

PT-2023-33932

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a hotplug callback leak in the dsu pmu init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.16 and fixed i...

5.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•3 views

PT-2023-34302

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a hotplug callback leak in the dsu pmu init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.16 and fixed ...

5.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•6 views

PT-2023-34597

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.16 through 5.10.162 Description The issue is related to a hotplug callback leak in the dsu pmu init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

5.6AI score
SaveExploits0References1
zdt
zdt
•added 2022/02/05 12:00 a.m.•385 views

Windows/x86 Download File / Execute Shellcode (458 bytes)

; Exploit Title: Windows/x86 - Download File and Execute / Dynamic PEB & EDT method Shellcode 458 bytes ; Exploit Author: Techryptic @Tech ; Date: 2022-01-31 ; Tested on: WIN7X86 ; Shoutout to 848 Advanced Software Exploitation and DSU. ; Description: ; The shellcode works in three parts. The fir...

7.4AI score
SaveExploits0
CVE
CVE
•added 2021/04/02 9:20 p.m.•90 views

CVE-2021-21529

Dell DSU (Dell System Update) version 1.9 and earlier is affected by a local DoS vulnerability where a low-privileged, authenticated user can spawn multiple instances of the vulnerable DSU process, exhausting system memory. The issue is documented under CVE-2021-21529 with CVSS metrics indicating...

5.5CVSS5.3AI score0.0021EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/02 12:00 a.m.•8 views

CVE-2021-21529: Uncontrolled Resource Consumption

Dell System Update DSU 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application...

5.5CVSS5.9AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/04/02 12:00 a.m.•2 views

PT-2021-14579

Name of the Vulnerable Software and Affected Versions Dell System Update DSU versions 1.9 and earlier Description The issue allows a local authenticated malicious user with low privileges to potentially exploit it, causing the system to run out of memory by running multiple instances of the...

5.5CVSS0.0021EPSS
SaveExploits0References4
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

AiCart 2.0 - Multiple Vulnerabilities

No description provided by source. ================================= AiCart 2.0 Multiple Vulnerabilities =================================== == Infos ================================================================================================== Date 18.06.2011 Software URL http://www.aicart.c...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2011/06/18 12:00 a.m.•32 views

AiCart 2.0 Cross Site Scripting / SQL Injection

================================= AiCart 2.0 Multiple Vulnerabilities =================================== == Infos ================================================================================================== Date 18.06.2011 Software URL http://www.aicart.ca/ Version 2.0 Google Dork...

0.5AI score
SaveExploits0
zdt
zdt
•added 2011/06/18 12:00 a.m.•27 views

AiCart 2.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================= AiCart 2.0 Multiple Vulnerabilities =================================== == Infos =============================================== Date 18.06.2011 Software URL http://www.aicart.ca/ Version 2.0 Google Dork...

7.1AI score
SaveExploits0
Rows per page
Query Builder