PCRE 8.41 Buffer Overflow

Buffer Overflow in function match PCRE 8.41 CVE-2017-16231 Product Download: https://sourceforge.net/projects/pcre/files/pcre/ Vulnerability TypePSoBuffer Overflow Attack Type : local Vulnerability Description a pcretest load test PoC produces a crash overflow in the function match in pcreexec.c...

Code injection

eScan Agent Application MWAGENT.EXE 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary commands by sending a carefully crafted payload to TCP port 2222...

CVE-2018-1000876

binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfdgetdynamicrelocupperbound,bfdcanonicalizedynamicreloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to be...

PT-2018-3886 · D Link · D-Link 825L +1

Name of the Vulnerable Software and Affected Versions: D-Link myDlink Baby App version 2.04.06 D-Link 825L firmware 1.08 Description: The issue concerns the communication between the myDlink Baby App and the D-Link 825L Wi-Fi camera, where credentials, including username and password, are sent in...

CVE-2018-16883

sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "alloweduids" configuration parameter. If sensitive information were stored in the user directory, this could be inadvertently disclosed to local attackers...

Input validation

Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks...

CVE-2018-19295

CVE-2018-19295 affects Sylabs Singularity 2.4–2.6. The issue is tied to improper handling of mount namespaces, enabling local users to escalate privileges due to how mount points were joined or propagated. Public records in OSV/USN/SUSE advisories indicate a fix in Singularity 2.6.1 (openSUSE/SUS...

CVE-2018-11465

Siemens SINUMERIK controllers (808D, 828D, 840D sl) running affected V4.x are vulnerable to CVE-2018-11465 via ioctl abuse that can cause out-of-bounds reads, arbitrary writes, or kernel-mode code execution. Affected: 808D v4.7/v4.8 (all before certain SPs), 828D v4.7 (all before v4.7 SP6 HF1), 8...

Google Android Memory Corruption Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. A memory corruption vulnerability due to type confusion exists in skclonelock in sock.c in Google Android. A local attacker can exploit this vulnerability to achieve...

UBUNTU-CVE-2018-19608

Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-ECDHE cipher suites...

Mbed TLS -- Local timing attack on RSA decryption

Janos Follath reports: An attacker who can run code on the same machine that is performing an RSA decryption can potentially recover the plaintext through a Bleichenbacher-like oracle...

SUSE-SU-2018:3865-1 Security update for the Linux Kernel (Live Patch 5 for SLE 12 SP3)

This update for the Linux Kernel 4.4.92-630 fixes several issues. The following security issues were fixed: - CVE-2018-5391: Fixed a possible denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service conditio...

Apple macOS Security Denial of Service Vulnerability

Apple macOS Sierra is a suite of specialized operating systems for Mac computers developed by Apple Inc. macOS High Sierra is the next generation of macOS. security is one of the security components. A security vulnerability exists in the Security component of Apple macOS Sierra version 10.12.6 a...

CVE-2018-1797

CVE-2018-1797 is a directory traversal vulnerability (Zip-Slip) in IBM WebSphere Application Server when using Enterprise Bundle Archives (EBA). An authenticated attacker could cause a victim to extract a crafted ZIP containing ".. /" sequences, enabling writing to arbitrary files on the host. Af...

Intel Distribution Python (IDP) 2018 - Privilege Escalation

Document Title: =============== Intel Distribution Python IDP 2018 - Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2166 ID: INTEL-SA-00181 https://nvd.nist.gov/vuln/detail/CVE-2018-12175 https://vuldb.com/fr/?id.123941...

GLSA-201810-08 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201810-08 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the referenced CVE identifiers for details. In addition it was discovered that Gentoos PostgreSQL installati...

xorg-x11-server elevation of privilege vulnerability

The xorg-x11-server is an X Window System display server bundled with multiple vendor operating systems. A security vulnerability exists in xorg-x11-server versions prior to 1.20.3. A local attacker can exploit this vulnerability to elevate privileges and run arbitrary code with root privileges...

Intel Quartus Family - Privilege Escalation Vulnerability

Document Title: =============== Intel Quartus Family - Privilege Escalation Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2159 Watch Video: https://www.youtube.com/watch?v=zX1Fmz0sAHk Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2160...

Intel Quartus Family - Privilege Escalation Vulnerability

Document Title: =============== Intel Quartus Family - Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2160 Video: https://www.vulnerability-lab.com/getcontent.php?id=2159 Intel ID: INTEL-SA-00151 Ref:...

EasyBoot v6.6.0.800 - (Function Key) Buffer Overflow

Document Title: =============== EasyBoot v6.6.0.800 - Function Key Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2155 Release Date: ============= 2018-10-15 Vulnerability Laboratory ID VL-ID: ==================================== 2155...