556 matches found
[SECURITY] Fedora 34 Update: rust-lsd-0.20.1-8.fc34
Ls command with a lot of pretty colors and some other stuff...
[SECURITY] Fedora 35 Update: rust-lsd-0.20.1-8.fc35
Ls command with a lot of pretty colors and some other stuff...
PT-2022-7288
Name of the Vulnerable Software and Affected Versions ruby-git versions prior to v1.13.0 Description The issue is related to incorrect code generation management in the Ruby/Git library, allowing a remote authenticated attacker to execute arbitrary Ruby code. This can be achieved by having a user...
Metasploit Wrap-Up
Word and Javascript are a rare duo. Thanks to thesunRider. you too can experience the wonder of this mystical duo. The sole new metasploit module this release adds a file format attack to generate a very special document. By utilizing Javascript embedded in a Word document to trigger a chain of...
ls-portal.eu Improper Access Control vulnerability OBB-2170155
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-38386
In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a directory has many files with long names...
Buffer overflow
In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a directory has many files with long names...
CVE-2021-38386
In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a directory has many files with long names...
Contiki 安全漏洞
Contiki is an open source cross-platform operating system for IoT Internet of Things devices. A security vulnerability exists in Contiki 3.0 that stems from improper handling of the ls command when there are many long name files in a directory. The vulnerability allows remote attackers to trigger...
CVE-2021-38386: Buffer Copy without Checking Size of Input
In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a directory has many files with long names...
SUSE: Security Advisory (SUSE-SU-2021:2555-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Command Injection in totaljs/framework
Description Command Injection in total.js Proof of Concept 1. Create the following PoC file: // poc.js const total = require'total.js'; let image = Image.load""; let payload = ";touch HACKED;"; image.pipenull,payload; 2. Execute the following commands in terminal: npm i total.js Install affected...
OSV-2018-280 Heap-buffer-overflow in xstrdup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7931 Crash type: Heap-buffer-overflow READ Crash state: xstrdup ftpparsewinntls wgetftplsfuzzer.c...
ls-tech.kr Cross Site Scripting vulnerability OBB-1261750
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
OS Command Injection
jenkins-git-client-plugin is vulnerable to OS command injection via 'git ls-remote'...
jenkins-git-client-plugin: OS command injection via 'git ls-remote'
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...
Fedora: Security Advisory for pure-ftpd (FEDORA-2020-5ac8d4c11a)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : texlive-filesystem (openSUSE-2020-368)
This update for texlive-filesystem fixes the following issues : Security issues fixed : - Changed default user for ls-R files and font cache directories to user nobody bsc1159740 - Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions bsc1158910 . - Made cron script more failsa...
Security update for texlive-filesystem (moderate)
openSUSE Security Update: Security update for texlive-filesystem Announcement ID: openSUSE-SU-2020:0368-1 Rating: moderate References: 1150556 1155381 1158910 1159740 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for...
jenkins-git-client-plugin: OS command injection via 'git ls-remote'
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...