23 matches found
CVE-2026-59147
Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsufind. The attach-time validator dsuvalidateheader checks the header scalars and region layout against the file size, but does not validate the array contents it then...
CVE-2026-59147
Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsufind. The attach-time validator dsuvalidateheader checks the header scalars and region layout against the file size, but does not validate the array contents it then...
CVE-2026-59147
The Data::DisjointSet::Shared Perl module (versions before 0.02 ) is vulnerable to out-of-bounds reads and writes. The root cause is an unvalidated parent index within the dsu_find function; while the dsu_validate_header validator checks header scalars and region layout against file size, it fail...
CVE-2025-48614
In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permission check. This could lead to physical denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48614
CVE-2025-48614 : Android recovery path bug in rebootWipeUserData (RecoverySystem.java) allows factory reset while in DSU mode due to a missing permission check. This creates a physical denial-of-service risk with no extra privileges and no user interaction needed. Affected: Android framework comp...
CVE-2025-48614
In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permission check. This could lead to physical denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48614: Missing Authorization
In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permission check. This could lead to physical denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-430568718
In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permission check. This could lead to physical denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
dsu.univr.it Cross Site Scripting vulnerability OBB-3398788
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GSD-2023-1001520 perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
perf: armdsu: Fix hotplug callback leak in dsupmuinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...
PT-2023-33932
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a hotplug callback leak in the dsu pmu init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.16 and fixed i...
PT-2023-34302
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a hotplug callback leak in the dsu pmu init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.16 and fixed ...
PT-2023-34597
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.16 through 5.10.162 Description The issue is related to a hotplug callback leak in the dsu pmu init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
Windows/x86 Download File / Execute Shellcode (458 bytes)
; Exploit Title: Windows/x86 - Download File and Execute / Dynamic PEB & EDT method Shellcode 458 bytes ; Exploit Author: Techryptic @Tech ; Date: 2022-01-31 ; Tested on: WIN7X86 ; Shoutout to 848 Advanced Software Exploitation and DSU. ; Description: ; The shellcode works in three parts. The fir...
CVE-2021-21529
Dell DSU (Dell System Update) version 1.9 and earlier is affected by a local DoS vulnerability where a low-privileged, authenticated user can spawn multiple instances of the vulnerable DSU process, exhausting system memory. The issue is documented under CVE-2021-21529 with CVSS metrics indicating...
CVE-2021-21529: Uncontrolled Resource Consumption
Dell System Update DSU 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application...
PT-2021-14579
Name of the Vulnerable Software and Affected Versions Dell System Update DSU versions 1.9 and earlier Description The issue allows a local authenticated malicious user with low privileges to potentially exploit it, causing the system to run out of memory by running multiple instances of the...
AiCart 2.0 - Multiple Vulnerabilities
No description provided by source. ================================= AiCart 2.0 Multiple Vulnerabilities =================================== == Infos ================================================================================================== Date 18.06.2011 Software URL http://www.aicart.c...
AiCart 2.0 Cross Site Scripting / SQL Injection
================================= AiCart 2.0 Multiple Vulnerabilities =================================== == Infos ================================================================================================== Date 18.06.2011 Software URL http://www.aicart.ca/ Version 2.0 Google Dork...
AiCart 2.0 Multiple Vulnerabilities
Exploit for php platform in category web applications ================================= AiCart 2.0 Multiple Vulnerabilities =================================== == Infos =============================================== Date 18.06.2011 Software URL http://www.aicart.ca/ Version 2.0 Google Dork...