4736 matches found
CVE-2019-14054
CVE-2019-14054 describes an improper permissions issue in the XBL_SEC region that lets a local attacker update XBL_SEC code/data and divert the RAM dump path to a normal cold boot path on Qualcomm Snapdragon platforms. Affected families include Snapdragon Compute, Snapdragon Consumer IoT, Snapdra...
CVE-2019-14054
Improper permissions in XBLSEC region enable user to update XBLSEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998,...
CVE-2019-14054: Undefined Security Weakness
Improper permissions in XBLSEC region enable user to update XBLSEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998,...
CiscoExploit
This is a collection of three separate tools for exploiting vulnerabilities in Cisco devices. The tools are: 1. CiscoRV320Dump-master: This tool is designed to dump the configuration of a Cisco RV320 router. It includes a script called dumpconfig.py that extracts the configuration from the router...
The vulnerability of the “mlx5_fw_fatal_reporter_dump()” function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the “mlx5fwfatalreporterdump” function in the Linux operating system is related to an uncontrolled resource consumption resource exhaustion. Exploiting this vulnerability could allow a attacker to cause a service failure...
CVE-2020-2004
Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on GlobalProtect app also known as GlobalProtect Agent for MacOS and Windows. For this issue to occur all of these conditions must be true: 1 'Sav...
CVE-2020-6248
SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...
Code injection
SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...
CVE-2020-6248
SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...
CVE-2020-6248
CVE-2020-6248 affects SAP Adaptive Server Enterprise (Backup Server) 16.0. The issue arises because the server does not perform required validation for an authenticated user during DUMP/LOAD, enabling arbitrary code execution or code injection. Related sources describe potential database takeover...
CVE-2020-6248: Improper Input Validation
SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...
Nuls Public Chain Transaction Signature Verification Vulnerability
A vulnerability in Nuls' transaction signature verification algorithm allowed an attacker to bypass signature verification using carefully constructed transactions, transferring tokens from the team's account, with some of the tokens subsequently dumped into the market...
YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection
Exploit Title: YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection Date: 2020-04-25 Exploit Author: coiffeur Vendor Homepage: https://yeswiki.net/ Software Link: https://yeswiki.net/, https://github.com/YesWiki/yeswiki Version: YesWiki cercopitheque OPTIONS... DESCRIPTION: -lt, list tables. -...
CVE-2020-5882
On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1, under certain conditions, the Intel QuickAssist Technology QAT cryptography driver may produce a Traffic Management Microkernel TMM core file...
CVE-2020-5875
On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel TMM may generate a core file and restart while processing SSL traffic with an HTTP/2 full proxy...
CVE-2019-14116
Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash dump boot flow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...
CVE-2019-14116: Missing Authorization
Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash dump boot flow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...
Arbitrary Code Execution
wireshark is vulnerable to arbitrary code execution. The vulnerability exists as when Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark...
Denial Of Service (DoS)
wireshark is vulnerable to denial of service. The flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file...
Denial Of Service (DoS)
wireshark is vulnerable to denial of service DoS. The vulnerability exists as Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file...