4966 matches found
CVE-2021-3129
creationtimestamp| type| source ---|---|--- 2021-01-12 18:52:35+00:00| seen| https://t.me/cibsecurity/21947 2021-01-23 14:27:59+00:00| published-proof-of-concept| Telegram/V0JRptGFrgnQJ2SXhKrSjD8wR0dUer2UmfcxEmcwlwjBg 2021-01-24 14:36:01+00:00| seen| https://t.me/CyberSecurityTechnologies/2562...
PT-2020-17589
Name of the Vulnerable Software and Affected Versions may queue versions through 2020-11-10 Description An issue in the may queue crate for Rust can cause memory corruption due to the lack of bounds on its Send trait or Sync trait. This allows non-Sync types, such as Cell, to be shared across...
CVE-2020-9787
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. Some websites may not have appeared in Safari Preferences...
may-finanz.com Cross Site Scripting vulnerability OBB-1349221
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-21919
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions, including hb set digest lowest bits t and hb ot layout...
July 14, 2020—KB4565503 (OS Build 19041.388)
None None...
CVE-2020-8193
creationtimestamp| type| source ---|---|--- 2020-07-11 15:39:26+00:00| published-proof-of-concept| Telegram/HFcMUewjNmGZHFQM6L589-YD7TF0J3Yls8VWINDjwu9WQ 2020-07-16 10:00:46+00:00| published-proof-of-concept| https://t.me/misteam/169 2020-07-16 16:04:38+00:00| published-proof-of-concept|...
kernel: perf_event_open() and execve() race in setuid programs allows a data leak
A race condition in perfeventopen allows local attackers to leak sensitive data from setuid programs. As no relevant locks in particular the credguardmutex are held during the ptracemayaccess call, it is possible for the specified target task to perform an execve syscall with setuid execution...
Security update for Virtualbox (moderate)
openSUSE Security Update: Security update for Virtualbox Announcement ID: openSUSE-SU-2020:0925-1 Rating: moderate References: 1169628 Cross-References: CVE-2020-2741 CVE-2020-2742 CVE-2020-2743 CVE-2020-2748 CVE-2020-2758 CVE-2020-2894 CVE-2020-2902 CVE-2020-2905 CVE-2020-2907 CVE-2020-2908...
CVE-2020-8907
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "docker" group, an attacker with this role is able to run docker and...
PT-2020-20360 · Google Cloud Platform +1 · Guest-Oslogin +1
Name of the Vulnerable Software and Affected Versions: Google Cloud Platform's guest-oslogin versions 20190304 through 20200507 Description: A vulnerability in Google Cloud Platform's guest-oslogin allows a user with the role "roles/compute.osLogin" to escalate privileges to root. This is achieve...
June 18, 2020—KB4567515 (OS Build 16299.1937)
None None...
Documalis Free PDF Editor Buffer Overflow
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Documalis Free PDF Editor', 'Description' = %qDocumalis Free PDF Editor is prone to a security vulnerability when open PDF files.When the...
LinuxKI Toolset 6.01 CVE-2020-7209 - Remote Command Execution
This Metasploit module exploits a vulnerability in LinuxKI Toolset versions 6.01 and below which allows remote code execution. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LinuxKI Toolset 6....
artigiancredito.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1179551 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
bomsite.co.il Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1179152 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
milwaukeetool.com.au Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178817 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
carethy.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178504 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
serac-group.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178268 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
pcshop.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178102 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...