91 matches found
EulerOS Virtualization for ARM 64 3.0.5.0 : libmirage (EulerOS-SA-2020-1090)
According to the versions of the libmirage package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.CVE-2019-15757 -...
CVE-2019-9269
In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-36899497...
Design/Logic Flaw
In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-36899497...
CVE-2019-9269
CVE-2019-9269 is an Android 10 elevation-of-privilege issue described as a local permissions bypass in System Settings caused by a cached Linux user ID. The vulnerability could allow a local attacker to bypass permissions with no additional execution privileges required; exploitation reportedly r...
CVE-2019-15540
filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user...
Heap overflow
filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user...
CVE-2019-15540
filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user...
CVE-2019-15540
The CVE-2019-15540 issue affects libmirage 3.2.2 in CDemu, specifically the CSO filter (filters/filter-cso/filter-stream.c). The root cause is that the part size is not validated, causing a heap-based buffer overflow. This can lead to local privilege escalation to root on Linux. Connected advisor...
Ubuntu 14.0415.10 - User Namespace Overlayfs Xattr SetGID Privilege Escalation
Ubuntu 14.0415.10 - User Namespace Overlayfs Xattr SetGID Privilege Escalation Source: http://www.halfdog.net/Security/2016/UserNamespaceOverlayfsXattrSetgidPrivilegeEscalation/ Introduction Problem description: Linux user namespace allows to mount file systems as normal user, including the...
ManageEngine Password Manager Pro / ManageEngine IT360 - SQL Injection
source: https://www.securityfocus.com/bid/69303/info ManageEngine Password Manager Pro and ManageEngine IT360 are prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Fedora Update for lldpad FEDORA-2013-12178
Check for the Version of lldpad OpenVAS Vulnerability Test Fedora Update for lldpad FEDORA-2013-12178 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
[SECURITY] Fedora 18 Update: lldpad-0.9.45-4.fc18
This package contains the Linux user space daemon and configuration tool for Intel LLDP Agent with Enhanced Ethernet support for the Data Center...
Reliance Communications Server Compromised with Information disclosure Vulnerability
Hacker with nickname "mr.hack3r420" has successfully compromise the web server of Reliance Communications rcom.co.in as shown in image screenshot taken by THN team and we make link hidden to save site from further misuse of damage. Hacker most probably get this access because of Information...
Nic.cl Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Main URI: http://www.nic.cl Type: Cross Site Scripting Exploitable URI: http://www.nic.cl/cgi-bin/show-form?f=/example/201001191941%3Cbody%20onload=alert%28this%29%3E3a6 Status: Reported Date: April 20, 2011, 12:27 p.m. Reported on:...
[CVE-2007-5301] alsaplayer PoC - exploit
Hello, I have released this PoC for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ !/bin/sh http://www.wekk.net/research/CVE-2007-5301/CVE-2007-5301-exploit.sh Exploit for alsaplayer before 0.99.80-rc3. Tested with the debian etc...
SuSE 10 Security Update : LUM (ZYPP Patch Number 2274)
A security problem was fixed in 'novell-lum', the eDirectory based 'Linux User Management'. Under certain circumstances it was possible to login to the console without any password. ssh is not affected, since it rejects empty passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The tex...
CVE-2006-6662
Unspecified vulnerability in Linux User Management novell-lum on SUSE Linux Enterprise Desktop 10 and Open Enterprise Server 9, under unspecified conditions, allows local users to log in to the console without a password...
CVE-2006-6662
CVE-2006-6662 describes an unspecified vulnerability in Linux User Management (novell-lum) affecting SUSE Linux Enterprise Desktop 10 and Open Enterprise Server 9. Under unspecified conditions, local users could log in to the console without a password. The connected documents reaffirm the affect...