12283 matches found
CVE-2020-10566
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow...
CVE-2020-10566
CVE-2020-10566 affects grub2-bhyve used in FreeBSD bhyve prior to revision 525916 (2020-02-12). Affected component is grub2-bhyveâs handling of font loading via a guest grub2.cfg, which leads to a buffer overflow. Multiple sources (NVD, Red Hat advisory, CNVD, CNVD mirrors) corroborate the vulner...
CVE-2020-10566: Buffer Copy without Checking Size of Input
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow...
PT-2020-12208
Name of the Vulnerable Software and Affected Versions grub2-bhyve versions prior to revision 525916 2020-02-12 Description The issue is related to the mishandling of font loading by a guest through a grub2.cfg file, leading to a buffer overflow. Recommendations For versions prior to revision 5259...
PowerSploit1
This is a PowerShell module for code execution and antivirus bypass. The module contains several functions, including: 1. Find-AVSignature: This function locates tiny AV signatures using the same method as DSplit from "class101" on heapoverflow.com. 2. Invoke-DllInjection: This function injects a...
Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2020-1196)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization for ARM 64 3.0.2.0 : perl (EulerOS-SA-2020-1196)
According to the versions of the perl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows...
CVE-2020-0798
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...
Privilege escalation
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...
Horde Groupware Webmail Edition 5.2.22 PHAR Loading
exploit-phar-loading.py !/usr/bin/env python3 from horde import Horde import requests import subprocess import sys TEMPDIR = '/tmp' WWWROOT = '/var/www/html' if lensys.argv ' sys.exit1 baseurl = sys.argv1 username = sys.argv2 password = sys.argv3 filename = sys.argv4 phpcode = sys.argv5 source =...
CVE-2020-0798: Undefined Security Weakness
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading Exploit
Exploit for php platform in category web applications exploit-phar-loading.py !/usr/bin/env python3 from horde import Horde import requests import subprocess import sys TEMPDIR = '/tmp' WWWROOT = '/var/www/html' if lensys.argv ' sys.exit1 baseurl = sys.argv1 username = sys.argv2 password =...
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading
exploit-phar-loading.py !/usr/bin/env python3 from horde import Horde import requests import subprocess import sys TEMPDIR = '/tmp' WWWROOT = '/var/www/html' if lensys.argv ' sys.exit1 baseurl = sys.argv1 username = sys.argv2 password = sys.argv3 filename = sys.argv4 phpcode = sys.argv5 source =...
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading exploit-phar-loading.py !/usr/bin/env python3 from horde import Horde import requests import subprocess import sys TEMPDIR = '/tmp' WWWROOT = '/var/www/html' if lensys.argv ' sys.exit1 baseurl = sys.argv1 username = sys.argv2 password =...
Secure Boot Disclosure Information
The vulnerability of the Secure Boot protocol for Windows operating systems is related to errors in accessing debug functions during the loading process. Exploiting this vulnerability can allow attackers to disclose sensitive information, using a specially created application...
AZL-9920 CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
Tencent Document Dll Hijacking Vulnerability
Tencent Document is an online document that allows for multi-person collaboration. Tencent Document has a Dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and execute arbitrary code...
WebExtension Component Confidential Data Access
The vulnerability of the WebExtension component in the Firefox browser is related to an extension error that prevents the loading and use of certain pages. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
February 27, 2020âKB4535996 (OS Builds 18362.693 and 18363.693)
None None...
Malwarebytes Anti-Malware Remote Code Execution (CVE-2019-6739)
A remote code execution vulnerability exists in Malwarebytes Anti-Malware. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by enticing a us...