mysql: Init script calling kill with root privileges using pid from pidfile owned by mysql user (CPU Oct 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

Moderate: Red Hat Security Advisory: rh-mysql57-mysql security update

An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

PT-2018-19035

Name of the Vulnerable Software and Affected Versions Android version 9 Description The issue is related to a missing bounds check in the ixheaacd dec data init function of ixheaacd create.c, which could lead to a possible out of bounds read. This might result in remote code execution without...

init-kc.ru XSS vulnerability

Open Bug Bounty ID: OBB-688518 Description| Value ---|--- Affected Website:| init-kc.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Android (zygote->init;) Chain from USB Privilege Escalation Exploit

Exploit for Android platform in category local exploits After reporting https://bugs.chromium.org/p/project-zero/issues/detail?id=1583 Android ID 80436257, CVE-2018-9445, I discovered that this issue could also be used to inject code into the context of the zygote. Additionally, I discovered a...

CVE-2018-17043

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

Heap overflow

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

CVE-2018-17043

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

CVE-2018-17043

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

CVE-2018-17043

The CVE-2018-17043 entry concerns doc2txt up to 2014-03-19 with a heap-based buffer overflow in Storage::init (Storage.cpp), invoked via parse_doc (parse_doc.cpp). Affected component is doc2txt’s storage initialization logic, and the root cause is a heap buffer overflow within Storage::init. Repo...

CVE-2018-17043

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

doc2txt Heap Buffer Overflow Vulnerability

doc2txt is a tool for extracting text from .doc binary files. doc2txt A heap buffer overflow vulnerability exists in the 'Storage::init' function of the Storage.cpp file in versions 2014-03-19 and earlier. An attacker can exploit this vulnerability to cause a denial of service or code execution...

CVE-2018-17043: Out-of-bounds Write

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

PT-2018-13857

Name of the Vulnerable Software and Affected Versions doc2txt versions prior to 2014-03-19 Description The issue is a heap-based buffer overflow in the Storage::init function, located in Storage.cpp, which is called from parse doc in parse doc.cpp. Recommendations For versions prior to 2014-03-19...

Android - 'zygote->init;' Chain from USB Privilege Escalation

After reporting https://bugs.chromium.org/p/project-zero/issues/detail?id=1583 Android ID 80436257, CVE-2018-9445, I discovered that this issue could also be used to inject code into the context of the zygote. Additionally, I discovered a privilege escalation path from zygote to init; that...

Android - zygote-init; Chain from USB Privilege Escalation

Android - zygote-init; Chain from USB Privilege Escalation After reporting https://bugs.chromium.org/p/project-zero/issues/detail?id=1583 Android ID 80436257, CVE-2018-9445, I discovered that this issue could also be used to inject code into the context of the zygote. Additionally, I discovered a...

CVE-2018-16145

The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited by the nagios user, and would allow attackers to elevate their privileges to root after a system restart, hence obtaining full control of...

PT-2018-13575

Name of the Vulnerable Software and Affected Versions Cscms version 4 Description The issue allows for CSRF attacks, enabling unauthorized actions such as creating a member, authenticating vip members, creating a super administrator, and creating a web editor through specific API endpoints:...

PT-2018-13561

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.19.0-rc1 Description The issue is related to a double free when handling responses from an HSM Card in the sc pkcs15emu sc hsm init function in libopensc/pkcs15-sc-hsm.c. This could be exploited by attackers who can...

CVE-2018-16448: Cross-Site Request Forgery (CSRF)

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save...