Lucene search
+L

962 matches found

Hewlett-Packard
Hewlett-Packard
added 2021/05/14 12:00 a.m.76 views

Intel® PROSet/Wireless WiFi, Intel vPro® CSME WiFi and Killer™ WiFi May 2021 Security Updates

Intel has informed HP of potential security vulnerabilities identified in some Intel® PROSet/Wireless WiFi and Intel vPro® Converged Security and Management Engine CSME WiFi and Killer™ WiFi which may allow denial of service. Intel is releasing firmware and software updates to mitigate these...

5.3CVSS1.5AI score0.05765EPSS
SaveExploits4
Lenovo
Lenovo
added 2021/05/11 8:39 p.m.11 views

Intel® PROSet and Wireless WiFi, Intel vPro® CSME WiFi, and Intel® Killer™ WiFi Advisory - Lenovo Support US

No description provided...

3.5CVSS6.7AI score0.05765EPSS
SaveExploits4
Github Security Blog
Github Security Blog
added 2021/04/13 3:20 p.m.66 views

Code injection in port-killer

This affects all versions of package port-killer. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization. Running this PoC will cause the command touch success to be...

8.8CVSS4.9AI score0.01654EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/04/13 3:20 p.m.75 views

GHSA-2548-Q746-X5X6 Code injection in port-killer

This affects all versions of package port-killer. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization. Running this PoC will cause the command touch success to be...

7.5CVSS9AI score0.01654EPSS
SaveExploits1References3
NVD
NVD
added 2021/03/18 1:15 p.m.29 views

CVE-2021-23359

This affects all versions of package port-killer. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization. Running this PoC will cause the command touch success to be...

8.8CVSS0.01654EPSS
SaveExploits1References2
Prion
Prion
added 2021/03/18 1:15 p.m.25 views

Input validation

This affects all versions of package port-killer. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization. Running this PoC will cause the command touch success to be...

6.5CVSS9AI score0.01654EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/03/18 12:40 p.m.43 views

CVE-2021-23359 Arbitrary Command Injection

This affects all versions of package port-killer. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization. Running this PoC will cause the command touch success to be...

7.5CVSS9.2AI score0.01654EPSS
SaveExploits1References2
CVE
CVE
added 2021/03/18 12:40 p.m.63 views

CVE-2021-23359

CVE-2021-23359 affects all versions of port-killer. The root cause is unsanitized attacker-controlled input passed to Node.js child_process.exec, enabling arbitrary command execution. Documentation and related advisories (GHSA-2548-Q746-X5X6, OSV, Veracode, Snyk entry) describe a PoC where runnin...

8.8CVSS8.5AI score0.01654EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/18 12:36 p.m.8 views

CVE-2021-23359

This affects all versions of package port-killer. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization. Running this PoC will cause the command touch success to be...

8.8CVSS5.8AI score0.01654EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/03/18 12:00 a.m.12 views

Npm port-killer 操作系统命令注入漏洞

Npm port-killer is an application from Npm. It provides a function to terminate a process running on a given port. An operating system command injection vulnerability exists in Npm port-killer, which uses sub-processes to execute functions without input checking...

8.8CVSS8.1AI score0.01654EPSS
SaveExploits1References3
Snyk
Snyk
added 2021/02/23 5:53 p.m.14 views

Arbitrary Command Injection

Overview port-killer is a Kills the process running on a given port assuming you have permission to do so Affected versions of this package are vulnerable to Arbitrary Command Injection. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This...

8.8CVSS7.5AI score0.01654EPSS
SaveExploits1References2
OSV
OSV
added 2021/02/17 2:15 p.m.9 views

CVE-2020-24458

Incomplete cleanup in some IntelR PROSet/Wireless WiFi and Killer TM drivers before version 22.0 may allow a privileged user to potentially enable information disclosure and denial of service via adjacent access...

5.2CVSS6AI score0.0042EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/02/17 2:15 p.m.8 views

CVE-2020-24458

Incomplete cleanup in some IntelR PROSet/Wireless WiFi and Killer TM drivers before version 22.0 may allow a privileged user to potentially enable information disclosure and denial of service via adjacent access...

5.2CVSS5.6AI score0.0042EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/02/17 1:45 p.m.44 views

CVE-2020-24458

Incomplete cleanup in some IntelR PROSet/Wireless WiFi and Killer TM drivers before version 22.0 may allow a privileged user to potentially enable information disclosure and denial of service via adjacent access...

5.1AI score0.0042EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/17 1:45 p.m.79 views

CVE-2020-24458

CVE-2020-24458 affects Intel PROSet/Wireless WiFi and Killer driver families. Incomplete cleanup before version 22.0 may allow a privileged user to enable information disclosure and denial of service via adjacent access. Intel advisory Intel-SA-00448 documents a CVSSv3.1 base score 5.2 (C:H, I:N,...

5.2CVSS4.9AI score0.0042EPSS
SaveExploits0References1Affected Software1
Intel
Intel
added 2021/02/09 12:00 a.m.31 views

Intel® PROSet/Wireless WiFi and Killer™ Driver Advisory

Summary: A potential security vulnerability in some Intel® PROSet/Wireless WiFi and Killer™ drivers for Windows 10 may allow information disclosure or denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-24458...

5.2CVSS5AI score0.0042EPSS
SaveExploits0
ThreatPost
ThreatPost
added 2020/12/17 5:30 p.m.42 views

Cryptologists Crack Zodiac Killer's 340 Cipher

A remote team of three hobbyist cryptologists have solved one of the Zodiac Killer’s cipher after a half century. And while the name of the elusive serial killer remains hidden, the breakthrough represents a triumph for cryptology and the basic building blocks of cybersecurity — access control an...

7.1AI score
SaveExploits0References10
Schneier on Security
Schneier on Security
added 2020/12/16 1:01 p.m.34 views

Zodiac Killer Cipher Solved

The SF Chronicle is reporting more details here, and the FBI is confirming, that a Melbourne mathematician and team has decrypted the 1969 message sent by the Zodiac Killer to the newspaper. Theres no paper yet, but there are a bunch of details in the news articles. Heres an interview with one of...

2.2AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2020/12/15 12:00 p.m.35 views

The Zodiac Killer's Cipher Is Finally Cracked After 51 Years

Amateur and professional cryptographers, including those at the FBI, had been trying to decode the infamous serial killer's message to the media for decades...

4.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/12/15 12:00 a.m.41 views

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2020-2549)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

7.8CVSS6.7AI score0.01308EPSS
SaveExploits1References6
Rows per page
Query Builder