EUVD-2022-45843

Malicious code in bioql PyPI...

EUVD-2023-39680

Malicious code in bioql PyPI...

EUVD-2022-47391

Malicious code in bioql PyPI...

EUVD-2023-35282

Malicious code in bioql PyPI...

CVE-2023-42647

CVE-2023-42647 affects the Ifaa service. The root cause is a missing permission check that allows writing permission usage records for apps, leading to local information disclosure without additional execution privileges. Adverse impact is confined to information disclosure (confidentiality) with...

PT-2023-17632 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to a missing permission check, which could lead to local escalation of privilege without needing additional execution privileges. User interaction is not required for...

PUB-A-263783650

In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-31924

Affected software: Yubico pam-u2f (PAM module for FIDO2/U2F) prior to version 1.1.1. Root cause: A logic issue in pam-u2f could bypass a PIN requirement when configured to require PIN and the application allows NULL as the PIN; pam-u2f then proceeds with FIDO2 authentication without PIN. This byp...

Beatport Player 1.0.0.283 Stack Overflow

exploit.py Beatport Player 1.0.0.283 .M3U File Local Stack Overflow Exploit By: Encrypt3d.M!nd Tested on : Windows xp sp2 chars = "\x41" 1232 ns = "\xEB\x06\x90\x90" sh = "\x35\x2F\xD1\x72" nops = "\x90" 20 win32exec - EXITFUNC=thread CMD=calc.exe Size=351 Encoder=PexAlphaNum http://metasploit.co...

Solaris patchadd(1) (3) symlink vulnerabilty

Greetings Bugtraq, I was playing around with patchadd and the bug was found when I issued a "truss -f -o patch.log patchadd patch" where patch was a tarball and then patchadd omitted an error because of it being a tarball, so then when I went through the debug output, i found out that there was a...

Security Update for Windows Server 2003 (KB914389)

A local elevation of privilege security issue has been identified in the Server Message Block that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, yo...