Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager

RCE-CVE-2020-5902 BIG-IP F5 Remote Code Execution Descripti...

PT-2020-20492

Name of the Vulnerable Software and Affected Versions HiSuite versions prior to 10.1.0.500 Description The issue exists due to improper loading of a DLL file by HiSuite, allowing an attacker to load a DLL file of their choice. This is a result of a DLL hijacking vulnerability. Recommendations For...

[SECURITY] [DSA 4714-2] chromium regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4714-2 [email protected] https://www.debian.org/security/ Michael Gilbert July 04, 2020 https://www.debian.org/security/faq -...

nginx: HTTP request smuggling in configurations with URL redirect used as error_page

NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...

WriteUp_GoogleCTF_2017

This is a PoC exploit for a vulnerability in the Inst Prof binary, which is a x8664 Linux binary with PIE and NX enabled. The exploit allocates two pages using code reuse, one page to stack pivot and the other page to execute a shellcode. The shellcode is executed by dereferencing a text pointer...

pocsuite

This is a Python-based framework for remote vulnerability testing and proof-of-concept development, known as Pocsuite. It is developed by the Knownsec Security Team and comes with a powerful proof-of-concept engine, many niche features for penetration testers and security researchers. The framewo...

OSV-2020-677 Heap-buffer-overflow in load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15007 Crash type: Heap-buffer-overflow READ 4 Crash state: load rbinobjectnew rbinfilenewfrombuffer...

PT-2020-22471

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash state includes functions such as load, r bin object new, and r bin file new from buffer...

PT-2020-22358

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow READ 1 crash type. The crash state involves functions such as str table entry, parse elf header 64 be, and e...

Raonwiz CyMiInstaller322 ActiveX Code Issue Vulnerability

Raonwiz CyMiInstaller322 ActiveX is a version control program from the Korean company Raonwiz. A security vulnerability exists in File Download in Raonwiz CyMiInstaller322 ActiveX 2016.5.26.1 and earlier versions, which stems from the program failing to adequately perform an authentication...

COVID-19 Risks of Flying

I fly a lot. Over the past five years, my average speed has been 32 miles an hour. That all changed mid-March. It's been 105 days since I've been on an airplane -- longer than any other time in my adult life -- and I have no future flights scheduled. This is all a prelude to saying that I have be...

CVE-2020-15007

A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...

PT-2020-22610

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash state involves functions such as cbor decref and cbor load. No...

PT-2020-22505

Name of the Vulnerable Software and Affected Versions vips affected versions not specified Description The issue is related to a crash type of UNKNOWN WRITE. Technical details about the crash state include the functions vips foreign load gif render, vips foreign load gif next page, and vips forei...

Mattermost Server Information Disclosure Vulnerability (CNVD-2020-35456)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in the initialload API in Mattermost Server versions prior to 3.2.0. An attacker can exploit this vulnerability to obtain personal information...

monero:load-from-json_fuzz_tests: Global-buffer-overflow in epee::misc_utils::parse::match_string2

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5096090558005248 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: load-from-jsonfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

PyYAML Full Load Code Execution

The vulnerability of the fullload method and the FullLoader loader from the PyYAML library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2020-7995

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 3.2.0 Description: An issue was discovered in the Mattermost Server where the initial load API endpoint disclosed unnecessary personal information. Recommendations: For versions prior to 3.2.0, update to...

microcode_ctl security, bug fix and enhancement update

3:1.17-33.26.0.1 - update 06-2d-07 to 0x71a - update 06-55-04 to 0x2006906 - update 06-55-07 to 0x5002f01 - merge Oracle changes for early load via dracut - enable late load on install for UEK4 kernels marked safe except BDW-79 - set earlymicrocode='no' in virtualized guests to avoid early load...

CVE-2020-1834: Improper Validation of Integrity Check Value

HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135C00E135R2P11 and versions earlier than 10.1.0.135C00E135R2P8 have an insufficient integrity check vulnerability. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attack...