CVE-2020-5274: Fix Exception message escaping rendered by ErrorHandler

Affected versions Symfony 4.4.0 to 4.4.3 and 5.0.0 to 5.0.4 versions of the Symfony ErrorHandler component are affected by this security issue. The issue has been fixed in Symfony 4.4.4 and 5.0.4. Description When ErrorHandler renders an exception HTML page, it uses un-escaped properties from the...

PT-2020-18364 · Symfony · Symfony +1

Name of the Vulnerable Software and Affected Versions: Symfony versions prior to 4.4.5 and 5.0.5 symfony/http-foundation versions prior to 4.4.5 and 5.0.5 Description: The issue arises from the ErrorHandler rendering unescaped properties of the Exception class when displaying the stacktrace, whic...

FreeCommander XE 2020 Pathname Buffer Overflow

!/usr/bin/python Exploit Title: FreeCommander XE 2020 - Pathname Buffer Overflow SEH Version: Build 810a 32-bit Software Link: https://freecommander.com/downloads/FreeCommanderXE-32-publicsetup.zip Date: 2020-03-28 Exploit Author: Hodorsec [email protected] / [email protected] Vendor...

FreeCommander XE 2020 Pathname Buffer Overflow Exploit

!/usr/bin/python Exploit Title: FreeCommander XE 2020 - Pathname Buffer Overflow SEH Version: Build 810a 32-bit Software Link: https://freecommander.com/downloads/FreeCommanderXE-32-publicsetup.zip Exploit Author: Hodorsec email protected / email protected Vendor Homepage:...

jetty: full server path revealed when using the default Error Handling

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

10-Strike Network Inventory Explorer 8.54 Buffer Overflow

Exploit Title: 10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow SEH Date: 2020-03-24 Author: Felipe Winsnes Vendor Homepage: https://www.10-strike.com/ Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-setup.exe Version: 8.54 Tested on:...

10-Strike Network Inventory Explorer 8.54 - Add Local Buffer Overflow (SEH)

10-Strike Network Inventory Explorer 8.54 - Add Local Buffer Overflow SEH Exploit Title: 10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow SEH Date: 2020-03-24 Author: Felipe Winsnes Vendor Homepage: https://www.10-strike.com/ Software Link:...

10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)

Exploit Title: 10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow SEH Date: 2020-03-24 Author: Felipe Winsnes Vendor Homepage: https://www.10-strike.com/ Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-setup.exe Version: 8.54 Tested on:...

CVE-2019-20556

An issue was discovered on Samsung mobile devices with P9.0 SM6150, SM8150, SM8150FUSION, exynos7885, exynos9610, and exynos9820 chipsets software. RKP memory corruption allows attackers to control the effective address in EL2. The Samsung ID is SVE-2019-15221 October 2019...

SUSE-SU-2020:0750-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen. Now an InvalidURL exception is raised bsc1155094...

Huawei CampusInsight and ManageOne Double Release Vulnerability

Huawei ManageOne and CampusInsight are both products of Huawei, a Chinese company.ManageOne is a set of cloud data center management solutions. ManageOne is a cloud data center management solution that supports unified management of heterogeneous cloud resource pools and provides multi-level VDC...

The vulnerability of Intel microprocessor microprogramming software, related to insufficient testing of privileged states, allows attackers to enhance their privileges or disclose protected information.

The vulnerability of Intel microprogramming software is related to insufficient testing of exception states. Exploiting this vulnerability can allow attackers to enhance their privileges or disclose protected information...

PT-2020-6957 · Red Hat +4 · Resteasy +4

Name of the Vulnerable Software and Affected Versions: RESTEasy versions prior to 3.11.1.Final RESTEasy versions prior to 4.5.3.Final Description: A cross-site scripting XSS flaw was found in RESTEasy, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An...

[SECURITY] Fedora 32 Update: mbedtls-2.16.5-1.fc32

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

The Basics of Exploit Development 2: SEH Overflows

In this article we will be writing an exploit for a 32-bit Windows application vulnerable to Structured Exception Handler SEH overflows. While this type of exploit has been around for a long time, it is still applicable to modern systems...

CVE-2020-0511

Uncaught exception in system driver for IntelR Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial of service via local access...

Design/Logic Flaw

Uncaught exception in system driver for IntelR Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial of service via local access...

kernel: powerpc: local user can read vector registers of other users' processes via a Facility Unavailable exception

A flaw in the Linux kernel on the PowerPC platform, was found where a local user can read vector registers of other user processes via a Facility Unavailable exception. An attacker must start a transaction when the FPU operation begins or there is no leakage. Vector registers will become corrupte...

Xen Arm-Based CPU Speculation past the ERET Instruction (XSA-312)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a speculative memory accesses vulnerability. Some CPUs can speculate past an ERET instruction and potentially perform speculative accesses to memory before processing the exception return...

Cross-site scripting in PHPMailer

PHPMailer versions prior to 5.2.24 released July 26th 2017 have an XSS vulnerability in one of the code examples, CVE-2017-11503. The codegenerator.phps example did not filter user input prior to output. This file is distributed with a .phps extension, so it it not normally executable unless it i...