The vulnerability of the session_user() function in the fs/ksmbd/smb2pdu.c file of the KSMBD file system in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the sessionuser function in the fs/ksmbd/smb2pdu.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause servic...

Directory traversal

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files on the local filesystem outside of the expected area, as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element...

Node.js: Permission model improperly processes UNC paths

The vulnerability in the istreegranted function in fspermission.cc assumed that any path starting with two backslashes had a four-character prefix that could be ignored, which was not always true. This led to vulnerable edge cases on Windows systems...

Path Traversal

mlflow is vulnerable to Path Traversal. An attacker is able to use faulty path validation middleware to get around security measures on Windows hosts and take complete control of the host's file system. This enables absolute Windows file paths to be used for file listing, reading, writing, and...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6231-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6231-1 advisory. It was discovered that the XFS file system implementation in the Linux kernel did not properly perform metadata validation when mounting certain images. ...

Ubuntu 23.04 : Linux kernel vulnerabilities (USN-6224-1)

The remote Ubuntu 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6224-1 advisory. It was discovered that the XFS file system implementation in the Linux kernel did not properly perform metadata validation when mounting certain images. An...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6235-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6235-1 advisory. It was discovered that the NTFS file system implementation in the Linux kernel contained a null pointer dereference in some situations. A local attacker...

Ubuntu 23.04 : Linux kernel vulnerabilities (USN-6228-1)

The remote Ubuntu 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6228-1 advisory. It was discovered that the XFS file system implementation in the Linux kernel did not properly perform metadata validation when mounting certain images. An...

Aures Booking & POS Terminal - Local Privilege Escalation

Exploit Title: Aures Booking & POS Terminal - Local Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2323 Release Date: ============= 2023-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 2323 Common...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ubi: Fix race condition between ctrlcdevioctl and ubicdevioctl CVE-2021-47634 In the Linux kernel, the following vulnerability has been resolved: Revert "Revert "block, bfq: honor already-setup queue merges""...

Aures Booking And POS Terminal Local Privilege Escalation

Document Title: =============== Aures Booking & POS Terminal - Local Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2323 Release Date: ============= 2023-07-17 Vulnerability Laboratory ID VL-ID: ====================================...

The vulnerability of the JFS file system in Linux operating systems, particularly in the function `txEnd()`, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JFS file system in Linux operating systems is related to the reutilization of previously freed memory due to competitive access to resources between the functions lmLogClose and txEnd in the fs/jfs/jfstxnmgr.c module. Exploiting this vulnerability can allow an attacker to...

Path traversal

An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings. This feature is disabled by default. When the API is enabled and handling requests, a path traversal vulnerability exists that allows a remote actor to leverag...

CVE-2023-2913 Rockwell Automation ThinManager ThinServer Path Traversal Vulnerability

An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings. This feature is disabled by default. When the API is enabled and handling requests, a path traversal vulnerability exists that allows a remote actor to leverag...

CVE-2023-2913

CVE-2023-2913 describes a relative path traversal vulnerability in Rockwell Automation ThinManager ThinServer. When the HTTPS Server Settings API feature is enabled, remote attackers could leverage server filesystem privileges to read arbitrary files. Affected products/versions cited in sources i...

CVE-2023-2913 Rockwell Automation ThinManager ThinServer Path Traversal Vulnerability

An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings. This feature is disabled by default. When the API is enabled and handling requests, a path traversal vulnerability exists that allows a remote actor to leverag...

USN-6235-1: Linux kernel (OEM) vulnerabilities

It was discovered that the NTFS file system implementation in the Linux kernel contained a null pointer dereference in some situations. A local attacker could use this to cause a denial of service system crash. CVE-2022-4842 Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel di...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2023-2357)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in tableclear in drivers/md/dm-ioctl....

Aures Booking & POS Terminal - Local Privilege Escalation

Document Title: =============== Aures Booking & POS Terminal - Local Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2323 CVE-ID: CVE-2023-3786 References: https://nvd.nist.gov/vuln/detail/CVE-2023-3786...

Hidden - Windows Driver With Usermode Interface Which Can Hide Processes, File-System And Registry Objects, Protect Processes And Etc

Hidden has been developed like a solution for reverse engineering and researching tasks. This is a windows driver with a usermode interface which is used for hiding specific environment on your windows machine, like installed RCE programs ex. procmon, wireshark, vm infrastructure ex. vmware tools...