13500 matches found
eap-7: heap exhaustion via deserialization
A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an attacker to submit malicious requests using these classes, which could eventually exhaust the heap and result i...
USN-6412-1: Linux kernel vulnerabilities
Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...
USN-6412-1 linux, linux-aws, linux-aws-6.2, linux-azure, linux-azure-6.2, linux-azure-fde-6.2, linux-gcp, linux-gcp-6.2, linux-hwe-6.2, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-6.2, linux-oracle, linux-raspi, linux-starfive vulnerabilities
Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...
Ubuntu 18.04 ESM / 20.04 LTS : Linux kernel vulnerabilities (USN-6417-1)
The remote Ubuntu 18.04 ESM / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6417-1 advisory. It was discovered that the eBPF implementation in the Linux kernel contained a race condition around read- only maps. A privileged attacker...
Red Hat EAP 7 Security Vulnerability
Red Hat EAP 7 is a middleware platform from Red Hat, Inc. built on open standards and compatible with the Java EE 7 specification. A security vulnerability exists in Red Hat EAP 7, which stems from a flaw found in the deserialization of certain classes that allows instantiation of HashMap and...
USN-6417-1: Linux kernel vulnerabilities
It was discovered that the eBPF implementation in the Linux kernel contained a race condition around read-only maps. A privileged attacker could use this to modify read-only maps. CVE-2021-4001 It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash...
CVE-2023-5113
creationtimestamp| type| source ---|---|--- 2023-10-04 18:12:34+00:00| seen| https://t.me/cibsecurity/71599...
ShellSweep
ShellSweep ShellSweeping the evil Why ShellSweep "Shell...
Juniper SRX Firewall / EX Switch Remote Code Execution Exploit
This Metasploit module exploits a PHP environment variable manipulation vulnerability affecting Juniper SRX firewalls and EX switches. The affected Juniper devices running FreeBSD and every FreeBSD process can access their stdin by opening /dev/fd/0. The exploit also makes use of two useful PHP...
Juniper SRX Firewall / EX Switch Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'unixcrypt' require 'net/ssh' require 'net/ssh/commandstream' class MetasploitModule 'Junos OS PHPRC Environment Variable Manipulation RCE', 'Description' = %q...
DEBIAN-CVE-2023-5197
A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free. We recommend upgrading past commit...
CVE-2023-5172
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox 118...
CVE-2023-23958
Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...
CVE-2023-23958
Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...
Memory corruption
Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...
Amazon Linux 2 : python38 (ALASPYTHON3.8-2023-008)
The version of python38 installed on the remote host is prior to 3.8.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PYTHON3.8-2023-008 advisory. A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite...
Symantec Protection Engine Security Vulnerability
Symantec Protection Engine is a malware protection platform from Symantec USA. A security vulnerability exists in Symantec Protection Engine versions prior to 9.1.0, which stems from a hash disclosure vulnerability...
CVE-2023-23958
The CVE-2023-23958 issue affects Symantec Protection Engine, with versions prior to 9.1.0. The root cause is a Hash Leak vulnerability that may allow exposure of sensitive information to an unauthorized actor. Impact is described as exposure of confidential data, with no explicit exploit details ...
