openSUSE 15 Security Update : avahi (openSUSE-SU-2021:1845-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1845-1 advisory. - avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows...

IBM Cognos Controller 授权问题漏洞

IBM Cognos Controller is a business intelligence and planning solution from IBM Corporation. The product has features such as process automation, financial audit control, and creation and management of financial reports.IBM Cognos Controller is vulnerable to privilege permission and access contro...

CVE-2020-4821

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834...

PT-2021-3988

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Data Replication version 11.4 IBM InfoSphere Change Data Capture for z/OS version 10.2.1 Description The issue is related to a configuration vulnerability in IBM InfoSphere Data Replication and IBM InfoSphere Change Data Capture...

CVE-2020-0417

In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0417

In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

thrift:fuzz_go_tutorial: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4961416305049600 Project: thrift Fuzzing Engine: libFuzzer Fuzz Target: fuzzgotutorial Job Type: libfuzzerasanthrift Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fca3671c8ee Crash State: NULL Sanitizer: address ASAN Recommended...

WOWRestro < 1.1 - CSRF Bypass

The plugin does not properly check for CSRF in numerous of its AJAX actions, allowing attacker to make logged in users call them and perform unwanted actions, such as add/remove an item from their basket and empty it as well. PoC To empty a user basket:...

WOWRestro < 1.1 - CSRF Bypass

The plugin does not properly check for CSRF in numerous of its AJAX actions, allowing attacker to make logged in users call them and perform unwanted actions, such as add/remove an item from their basket and empty it as well. To empty a user basket:...

Trojan-Dropper.Win32.SVB.cz Authentication Bypass / Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/d57536189430fd75e45f53845e9b3f94.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Dropper.Win32.SVB.cz Vulnerability: Authentication Bypass RCE Description: The malware listen...

libigl:igl_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4821022468603904 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzerubsanlibigl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffff80 Crash State: NULL Sanitizer: undefined UBSAN Recommende...

vitess:read_query_results_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4903010676375552 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: readqueryresultsfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000e72783c Crash State: NULL Sanitizer: address ASAN...

gonids:fuzz_parserule: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6522837123858432 Project: gonids Fuzzing Engine: libFuzzer Fuzz Target: fuzzparserule Job Type: libfuzzerasangonids Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

containerd:fuzz_filters_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4959321254395904 Project: containerd Fuzzing Engine: libFuzzer Fuzz Target: fuzzfiltersparse Job Type: libfuzzerasancontainerd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff8 Crash State: NULL Sanitizer: address ASAN...

thrift:fuzz_go_tutorial: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6571196794667008 Project: thrift Fuzzing Engine: libFuzzer Fuzz Target: fuzzgotutorial Job Type: libfuzzerasanthrift Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f5829e728ee Crash State: NULL Sanitizer: address ASAN Recommended...

gdal:mitab_tab_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5157065600401408 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: mitabtabfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000c1e3fe0 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

UVI-2021-1000771 wireguard: allowedips: free empty intermediate nodes when removing single node

wireguard: allowedips: free empty intermediate nodes when removing single node This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.43 by commi...

GSD-2021-1000771 wireguard: allowedips: free empty intermediate nodes when removing single node

wireguard: allowedips: free empty intermediate nodes when removing single node This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.43 by commi...

Backdoor.Win32.ReverseTrojan.200 Authentication Bypass

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/3fbec7c0623f5f80e4d9c096a50b0d59.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.ReverseTrojan.200 Vulnerability: Authentication Bypass Empty Password Description:...

protoreflect:fuzz_protoparse: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4986903955898368 Project: protoreflect Fuzzing Engine: libFuzzer Fuzz Target: fuzzprotoparse Job Type: libfuzzerasanprotoreflect Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: addre...