flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2017-1000117

CVE-2017-1000117 utilisation $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117.git quand git rencontre un problème, ifconfig est exécuté...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Wordpress Really Simple Security — уязвимость обхода аутентификации в Docker Описание Плагины Really Simple Security Free, Pro и Pro Multisite для WordPress версий с 9.0.0 по 9.1.1.1 подвержены уязвимости обхода аутентификации. Эта проблема возникает из-за некорректной обработки...

CVE-2018-1000199

CVE-2018-1000199 Le code ptrace de Linux virtualise l'accès aux registres de débogage, et le code de virtualisation a une gestion d'erreurs incorrecte. Cela signifie que si vous écrivez une valeur illégale dans, par exemple, DR0, l'état interne du suivi des points d'arrêt du noyau peut devenir...

Testability-CVE-2014-1266

TestableSecurity Это небольшой proof-of-concept, который извлекает уязвимую SSLVerifySignedServerKeyExchange из libsecurityssl от Apple, чтобы продемонстрировать, что код подписи легко тестируется модульными тестами в изоляции. Хотя и ведутся разговоры о том, что эту ошибку было непросто...

Cisco ASA Authentication Bypass Using an Alternate Path or Channel (CVE-2023-20247)

A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect using only a valid...

CVE-2023-40130

https://wrlus.com/android-security/bindservice-error-handle/...

CVE-2024-10924

POC pour CVE-2024-10924 Une faille de gestion d'erreur dans l'API REST du plugin WordPress Really Simple Plugins versions entre 9.0.0 et 9.1.1.1 incluses permet à un attaquant, lorsque l'authentification à deux facteurs est activée, de contourner l'authentification et de prendre le contrôle d'un...

CVE-2021-3560

CVE-2021-3560 Повышение привилегий через race condition в polkit. Описание уязвимости CVE-2021-3560 — это race condition в polkit, который позволяет неавторизованному локальному пользователю получить права root. Уязвимость существует в том, как polkit обрабатывает ошибки D-Bus при обрыве...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: atmel: The issue with reference counting was fixed in atmelnandcontrollerinit. The reference counting issue occurs in several error handling paths involving an object with a refcount, called “nc-dmac”. In these path...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: The error handling path in idxdcdevregister has been fixed. If a call to allocchrdevregion fails, the already allocated resources are being leaked. The necessary error handling path has been added to address this...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm/slub: Avoid accessing metadata when the pointer is invalid in objecterr. objecterr reports details about an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempti...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed error handling in ext4fcrecordmodified inode. The current code does not properly handle the krealloc error case, which could lead to silent memory corruption or a kernel bug. This patch addresses this issue...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: rtla/osnoise: Prevent NULL dereferencing in error handling. If the "tool-data" allocation fails, there is no need to call osnoisefreetop. In fact, doing so will lead to a NULL dereferencing...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ASoC: mxs: Fixed error handling in mxssgtl5000probe. This function only calls ofnodeput in the regular path. It will cause a refcount leak in error-prone paths. For example, when codecnp is NULL, saifnp0 and saifnp1 are not NULL,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: core: Fixed a use-after-free in sndsocexit. KASAN reported a use-after-free: BUG: KASAN: Use-after-free in devicedel+0xb5b/0xc60. A read of size 8 at address ffff888008655050 was performed by the task rmmod/387. CPU: 2;...

CVE-2024-10924-Exploit

CVE-2024-10924-Exploit Really Simple Security Free, Pro, и Pro Multisite 9.0.0 – 9.1.1.1 — Обход аутентификации 📖 Описание Этот скрипт эксплуатирует уязвимость в плагине Really Simple Security версии 9.0.0 – 9.1.1.1 для WordPress. Ошибка позволяет обходить аутентификацию из-за неправильной...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Fail de contournement d'authentification de la sécurité Really Simple de Wordpress dans Docker Description Les plugins Really Simple Security Free, Pro et Pro Multisite pour WordPress, versions 9.0.0 à 9.1.1.1, sont affectés par une vulnérabilité de contournement...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...