CVE-2022-24826

On Windows, if Git LFS operates on a malicious repository with a "..exe" file as well as a file named "git.exe", and "git.exe" is not found in "PATH", the "..exe" program will be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems. Similarly, if the...

CVE-2022-24826: Untrusted Search Path

On Windows, if Git LFS operates on a malicious repository with a ..exe file as well as a file named git.exe, and git.exe is not found in PATH, the ..exe program will be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems. Similarly, if the malicious...

Unbreakable Enterprise kernel security update

5.4.17-2136.306.1.3 - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address Paolo Bonzini Orabug: 34053807 CVE-2022-1158 5.4.17-2136.306.1.2 - Revert 'rds/ib: recover rds connection from stuck rx path' Rohit Nair Orabug: 34045203 5.4.17-2136.306.1.1 - netfilter: nftables: initialize...

UBUNTU-CVE-2022-1286

heap-buffer-overflow in mrbvmexec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited...

PT-2022-18354 · Inhand Networks · Inrouter 900 Industrial 4G Router

Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter 900 Industrial 4G Router versions prior to 1.0.0.r11700 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the web exec parameter at the...

PT-2022-13775

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description A heap-buffer-overflow issue exists in the mrb vm exec function of mruby. This could potentially allow for arbitrary code execution if exploited. Recommendations For versions prior to 3.2, update to...

DEBIAN-CVE-2022-1201

NULL Pointer Dereference in mrbvmexec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter crash, thus affecting the availability of the system...

PT-2022-13708 · Mruby +1 · Mruby +1

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 3.2 Description: The issue is related to a NULL Pointer Dereference in mrb vm exec with super, which can cause the mruby interpreter to crash. This affects the availability of the system. Recommendations: For versions...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Docker $ sudo docker build -t . $ sudo...

UBUNTU-CVE-2022-1106

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

PT-2022-13664

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description The issue is related to a use after free in mrb vm exec. Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue...

PT-2022-28265

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue concerns the use of shell exec and exec functions, which were not properly escaping filenames and configuration settings in most cases. Recommendations At the moment, there is n...

mruby 资源管理错误漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby 3.1 and earlier, which stems from post-release reuse in mrbvmexec. No details of the vulnerability are provided at this time...

PT-2022-13633

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description The issue is related to a user after free in mrb vm exec. This problem affects the mruby GitHub repository. Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue...

PT-2022-29078

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29130

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29161

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29011

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

Python Exec, Python Meterpreter, Python Reverse TCP Stager

Execute a Python payload as an OS command from a Posix-compatible shell. Run a meterpreter server in Python compatible with 2.5-2.7 & 3.1+. Connect back to the attacker Module Options msf use payload/cmd/unix/python/meterpreter/reversetcp msf payloadreversetcp show actions ...actions... msf...

Python Exec, Python Meterpreter, Python Reverse HTTP Stager

Execute a Python payload as an OS command from a Posix-compatible shell. Run a meterpreter server in Python compatible with 2.5-2.7 & 3.1+. Tunnel communication over HTTP Module Options msf use payload/cmd/unix/python/meterpreter/reversehttp msf payloadreversehttp show actions ...actions... msf...