Cisco RV340/RV345 Dual WAN VPN Router Boundary Check RCE

The vulnerability of the loading module for microprogrammed software in Cisco RV340 and RV345 Dual WAN Gigabit VPN routers is related to improper boundary checks during HTTP request processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges...

UBUNTU-CVE-2022-34927

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...

Intel system BIOS Privilege Escalation

The vulnerability of the trusted loading module in Intel microprogramming system BIOS is related to insufficient checking of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Cisco Small Business Router Loading Module Code Execution

The vulnerability of the loading module for microprogrammed software in Cisco Small Business RV340, RV340W, RV345, and RV345P routers stems from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a...

CVE-2020-36386

A flaw out of bounds memory access in the Linux kernel bluetooth subsystem was found in the way when some data being read about the bluetooth device with the hciextendedinquiryresultevt call. A local user could use this flaw to crash the system or read some data out of memory bounds that can lead...

CVE-2019-18198

A flaw was found in the Linux kernel’s IPv6 routing system. A local attacker with the ability to configure routing can create a situation where they can corrupt memory or possibly escalate privileges. Mitigation As the IPV6 module will be auto-loaded when required, its use can be disabled by...

PT-2018-3132

Name of the Vulnerable Software and Affected Versions Blender version 2.78c Description The issue is caused by an integer overflow in the image loading module. This can be exploited by using a specially crafted .blend file, potentially allowing an attacker to execute arbitrary code under the...