CVE-2020-2024 Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS...

CVE-2020-2024

CVE-2020-2024 affects Kata Containers prior to 1.11.0. The vulnerability is an improper link resolution in kata-runtime that a malicious guest can exploit to trick the host into unmounting any mount point (and sub-mounts) on the host, potentially causing a host DoS. Impact is described as HIGH av...

Unspecified Vulnerability in Kata M4s

Kata M4s is a smartphone. The com.mediatek.factorymode app in the Kata M4s build fingerprint: alps/fullhct675066n/hct675066n:7.0/NRD90M/1495624556:user/test-keys has a security vulnerability. An attacker could use this vulnerability to make unauthorized changes to wireless settings via other...

CVE-2019-15425

The Kata M4s Android device with a build fingerprint of alps/fullhct675066n/hct675066n:7.0/NRD90M/1495624556:user/test-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a...

Code injection

The Kata M4s Android device with a build fingerprint of alps/fullhct675066n/hct675066n:7.0/NRD90M/1495624556:user/test-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a...

CVE-2019-15425

The Kata M4s Android device with a build fingerprint of alps/fullhct675066n/hct675066n:7.0/NRD90M/1495624556:user/test-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a...

CVE-2019-15425

Summary (validated data): The Kata M4s Android device (build fingerprint alps/full_hct6750_66_n/hct6750_66_n:7.0/NRD90M/1495624556:user/test-keys**) contains a pre-installed app with package name com.mediatek.factorymode (versionCode=1, versionName=1) that allows unauthorized wireless settings mo...

CVE-2010-2017

Cross-site scripting XSS vulnerability in hasil-pencarian.html in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to inject arbitrary web script or HTML via the kata parameter. NOTE: some of these details are obtained from third party information...

Joomla com_surveymanager (stype) SQL Injection Vulnerability

No description provided by source. Joomla comsurveymanager SQL injection vulnerability - stype Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 19, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9 CREW -=-...