3731 matches found
Exploit for Improper Initialization in Linux Linux_Kernel
DirtyPipe Exploit for the DirtyPi...
Maddy Mail Server 安全漏洞
Maddy Mail Server is a composable all-in-one mail server from the Russian individual developer Max Mazurov. A security vulnerability exists in maddy Mail Server versions prior to 0.5.4, which stems from not implementing password expiration or account expiration checks when using PAM for...
Exploit for Improper Initialization in Linux Linux_Kernel
Dirty Pipe - CVE-2022-0847 This is simply the code and instru...
Exploit for Improper Initialization in Linux Linux_Kernel
PoC exploit for CVE-2022-0847, a Linux Kernel Local Privilege Es...
CVE-2021-3677
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...
DEBIAN-CVE-2021-3677
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...
CVE-2021-3677
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...
CVE-2021-21708
In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTERVALIDATEFLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in...
DEBIAN-CVE-2021-21708
In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTERVALIDATEFLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in...
Memory corruption
In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTERVALIDATEFLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in...
CVE-2021-21708 UAF due to php_filter_float() failing
In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTERVALIDATEFLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in...
CVE-2021-21708
In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTERVALIDATEFLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in...
PT-2022-28653
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.94 through v5.10.100 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-28687
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue concerns the behavior of READ near OFFSET MAX in NFSD. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.2...
PT-2022-28617
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-28762
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue concerns the behavior of READ near OFFSET MAX in NFSD. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.1...
PT-2022-28712
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.17 through v5.15.23 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...
PT-2022-28796
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16.3 through v5.16.9 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...
CVE-2022-24671
A link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150 and below could allow a local attacker to modify a file during the update process and escalate their privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on...
Privilege escalation
A link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150 and below could allow a local attacker to modify a file during the update process and escalate their privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on...