4836 matches found
kernel: perf_event_open() and execve() race in setuid programs allows a data leak
A race condition in perfeventopen allows local attackers to leak sensitive data from setuid programs. As no relevant locks in particular the credguardmutex are held during the ptracemayaccess call, it is possible for the specified target task to perform an execve syscall with setuid execution...
Security update for Virtualbox (moderate)
openSUSE Security Update: Security update for Virtualbox Announcement ID: openSUSE-SU-2020:0925-1 Rating: moderate References: 1169628 Cross-References: CVE-2020-2741 CVE-2020-2742 CVE-2020-2743 CVE-2020-2748 CVE-2020-2758 CVE-2020-2894 CVE-2020-2902 CVE-2020-2905 CVE-2020-2907 CVE-2020-2908...
PT-2020-20360 · Google Cloud Platform +1 · Guest-Oslogin +1
Name of the Vulnerable Software and Affected Versions: Google Cloud Platform's guest-oslogin versions 20190304 through 20200507 Description: A vulnerability in Google Cloud Platform's guest-oslogin allows a user with the role "roles/compute.osLogin" to escalate privileges to root. This is achieve...
June 18, 2020—KB4567515 (OS Build 16299.1937)
None None...
Documalis Free PDF Editor Buffer Overflow
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Documalis Free PDF Editor', 'Description' = %qDocumalis Free PDF Editor is prone to a security vulnerability when open PDF files.When the...
LinuxKI Toolset 6.01 CVE-2020-7209 - Remote Command Execution
This Metasploit module exploits a vulnerability in LinuxKI Toolset versions 6.01 and below which allows remote code execution. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LinuxKI Toolset 6....
artigiancredito.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1179551 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
bomsite.co.il Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1179152 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
milwaukeetool.com.au Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178817 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
carethy.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178504 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
serac-group.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178268 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
pcshop.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178102 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
businessinvestmentforgrowth.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178000 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
mertek.atlatszo.hu Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177748 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-12077
creationtimestamp| type| source ---|---|--- 2020-05-29 20:46:03+00:00| seen| https://t.me/VulnerabilityNews/14898 2020-05-29 20:55:02+00:00| seen| https://t.me/cibsecurity/12406 2023-09-12 11:00:38+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9010 2024-08-16...
designwebsites.co.nz Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177654 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
newposts.ge Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177445 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
estate.mk.co.kr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177357 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
lcab.fulex.pro Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177077 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
fingyan.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1176696 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...