5064 matches found
CVE-2021-22454
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump...
Design/Logic Flaw
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump...
CVE-2021-22454
CVE-2021-22454 affects Huawei/HarmonyOS components. The vulnerability is described as External Control of System or Configuration Setting, allowing local attackers to trigger a core dump. Multiple sources (NVD, Red Hat advisory, CNVD, CVE records) consistently report the issue, with local access ...
CVE-2021-22454
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a microkernel-based distributed operating system. Huawei HarmonyOS is vulnerable to an infinite self-recursive vulnerability, which could be exploited by local attackers to cause a kernel dump...
CVE-2021-22454: Exposure of Resource to Wrong Sphere
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump...
PT-2021-15070
Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: A component of the HarmonyOS has an External Control of System or Configuration Setting issue. Local attackers may exploit this to cause a core dump. Recommendations: At the moment, there...
CVE-2019-3556
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the...
UBUNTU-CVE-2019-3556
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the...
CVE-2019-3556
The CVE-2019-3556 issue affects HHVM where the admin server’s dump-pcre-cache handler accepts an unvalidated filesystem path parameter, enabling a malicious user to overwrite arbitrary files with the privileges of the HHVM user. This can write to arbitrary locations and is tied to HHVM versions: ...
CVE-2019-3556
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the...
CVE-2019-3556
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the...
USN-5122-2 apport vulnerability
USN-5122-1 fixed a vulnerability in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Apport could be tricked into writing core files as root into arbitrary directories in certain scenarios. A local...
PT-2021-9106
Name of the Vulnerable Software and Affected Versions HHVM versions prior to 4.56.2 HHVM versions 4.57.0 through 4.78.0 HHVM versions 4.79.0, 4.80.0, 4.81.0, 4.82.0, 4.83.0 Description HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request...
CVE-2019-3556: Improper Limitation of a Pathname to a Restricted Directory
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the...
GSD-2021-1001742 ASoC: SOF: Fix DSP oops stack dump output contents
ASoC: SOF: Fix DSP oops stack dump output contents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...
Backdoor.Win32.LanaFTP.k Heap Corruption
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e2660742a80433e027ee9bdedc40e190.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.LanaFTP.k Vulnerability: Heap Corruption Description: The malware listens on TCP port...
Siemens Ruggedcom Rox Mx5000 资源管理错误漏洞
ROX-based VPN endpoints and firewall appliances are used to connect devices that operate in harsh environments, such as electric utility substations and transportation control cabinets. A denial of service vulnerability exists in the Siemens RUGGEDCOM ROX devices, which originates from a dump cra...
GPAC 缓冲区错误漏洞
GPAC is an open source multimedia framework. GPAC suffers from a buffer overflow vulnerability that stems from an issue discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow that can be exploited by an attacker to cause a denial of service DOS via crafte...
Exploit for CVE-2020-1472
介绍 参考很多师傅写的关于CS的脚本,内容有横向移动、密码抓取、权限提升、权限维持等,尽可能将内网渗透中常用到的东西整理一下方便使用 更新日志 2021.7.7 更新CVE-2021-1675只测试了本地提权,其他的待测 参考于 https://github.com/cube0x0/CVE-2021-1675 2021.7.26 更新CVE-2021-1675-36934,参考与 https://github.com/cube0x0/CVE-2021-36934 2021.8.14 更新ZeroLogonCVE-2020-1472,参考...