server boards Privilege Escalation

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

server boards Privilege Escalation

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

server boards Privilege Escalation

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

microprogramming software Privilege Escalation

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the improper assignment of permissions for files. Exploiting this vulnerability can allow attackers to enhance their privileges...

microprogramming software Buffer Overflow

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to writing beyond the buffer memory boundaries. Exploiting this vulnerability can allow attackers to enhance their privileges...

authentication Privilege Escalation

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

microprogramming software Input

Vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Node.js third-party modules: [zenn-cli] Path traversal on Windows allows the attacker to read arbitrary .md files

Summary I would like to report path traversal in zenn-cli. It allows the attacker to read arbitrary .md files. Module module name: zenn-cli version: 0.1.39 npm page: https://www.npmjs.com/package/zenn-cli Module Description Manage Zenn content locally 👩‍💻 Module Stats 885 weekly downloads...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), monk-cuda100 (0.0.1) +9 more potentially affected by CVE-2020-15203 via tensorflow-gpu (>=2.0.0, <=2.0.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.9 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 - monk-keras-cuda101-test 0.0.1 - monk-keras-cuda102 0.0.1 -...

Metasploit Wrap-up

Nine! Nine new modules! Ah ha ha! With the coming of autumn here in the Northern hemisphere, the nights are getting longer, and the hacking is getting stronger. We’ve really got something for everybody in this release, from IoT to infrastructure, Windows, and Linux; everyone’s pretty...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), monk-cuda100 (0.0.1) +9 more potentially affected by CVE-2020-15209 via tensorflow-gpu (>=2.0.0, <=2.0.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.9 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 - monk-keras-cuda101-test 0.0.1 - monk-keras-cuda102 0.0.1 -...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), monk-cuda100 (0.0.1) +9 more potentially affected by CVE-2020-15211 via tensorflow-gpu (>=2.0.0, <=2.0.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.9 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 - monk-keras-cuda101-test 0.0.1 - monk-keras-cuda102 0.0.1 -...

[SECURITY] Fedora 33 Update: ansible-2.9.13-1.fc33

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

CVE-2020-26088

A missing capabilities check when creating NFC raw sockets could be used by local attackers to create raw sockets, bypassing security mechanisms allowing them to create or listen to NFC communication frames. Mitigation As the nfc module will be auto-loaded when required, its use can be disabled b...

CVE-2020-14025

Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted changes such as installing new modules or changing a password...

Cross site request forgery (csrf)

Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted changes such as installing new modules or changing a password...

CVE-2020-14025

Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted changes such as installing new modules or changing a password...

GRAT2 - Command And Control (C2) Project For Learning Purpose

GRAT2 is a Command and Control C2 tool written in python3 and the client in .NET 4.0. The main idea came from Georgios Koumettou who initiated the project. Why we developed GRAT2 ? We are aware that there are numerous C2 tools out there but, we developed this tool due to curiosity of how C2 and...

Windows Modules Installer Privilege Escalation

The vulnerability of the Windows Modules Installer component in operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2020-14025: Cross-Site Request Forgery (CSRF)

Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted changes such as installing new modules or changing a password...