PT-2021-10845 · Rconfig · Rconfig

Name of the Vulnerable Software and Affected Versions: rConfig version 3.9.5 Description: The issue allows command injection by sending a crafted GET request to "lib/ajaxHandlers/ajaxArchiveFiles.php" since the path parameter is passed directly to the exec function without being escaped...

Backdoor.Win32.Zaratustra Remote File Write / Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/f240c16af2189ea9c94f317281ce7e59.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zaratustra Vulnerability: Unauthenticated Remote File Write Remote Code Exec...

UVI-2021-1001360 powerpc/mm: Fix lockup on kernel exec fault

powerpc/mm: Fix lockup on kernel exec fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.133 by commit...

GSD-2021-1001360 powerpc/mm: Fix lockup on kernel exec fault

powerpc/mm: Fix lockup on kernel exec fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.133 by commit...

UVI-2021-1001225 powerpc/mm: Fix lockup on kernel exec fault

powerpc/mm: Fix lockup on kernel exec fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit...

PT-2021-25765

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.51, update ...

PT-2021-25695

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.3 Description: The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.13.3, update...

PT-2021-29690

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.13.3, update to...

PT-2021-29825

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.133, update ...

PT-2021-25830

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.133, update ...

PT-2021-29760

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.51, update ...

Cross-Site Scripting (XSS)

Apache drill-java-exec is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the queryId...

PT-2021-27665

Name of the Vulnerable Software and Affected Versions: Mruby affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the mrb vm exec, mrb vm run, and mrb top run functions. Recommendations: At the moment, there is...

CVE-2021-31580

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be bypassed by switching the OpenSSH channel from shell to exec and providing the ssh client a single execution parameter. This issue was resolved in Akkadian OVA appliance version 3.0 and later, Akkadian Provisioning...

CVE-2021-31580

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be bypassed by switching the OpenSSH channel from shell to exec and providing the ssh client a single execution parameter. This issue was resolved in Akkadian OVA appliance version 3.0 and later, Akkadian Provisioning...

CVE-2021-31580: Improper Neutralization of Special Elements used in an OS Command

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be bypassed by switching the OpenSSH channel from shell to exec and providing the ssh client a single execution parameter. This issue was resolved in Akkadian OVA appliance version 3.0 and later, Akkadian Provisioning...

CVE-2021-36979

Unicorn Engine 1.0.2 has an out-of-bounds write in tbflusharmeb called from cpuarmexecarmeb and tcgcpuexecarmeb...

PT-2021-21417

Name of the Vulnerable Software and Affected Versions Unicorn Engine version 1.0.2 Description The issue is an out-of-bounds write in the tb flush armeb function, which is called from cpu arm exec armeb and tcg cpu exec armeb. Recommendations For Unicorn Engine version 1.0.2, consider disabling t...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62476)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in the DNS Snap-in in...

The vulnerability of the PostScriptFunction::exec function in the Function.cc component of the Poppler PDF rendering library, related to division by zero, allows a malicious actor to cause a service failure.

The vulnerability of the PostScriptFunction::exec function in the Function.cc component of the Poppler PDF rendering library is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...