Exploit for CVE-2020-16898

CVE-2020-16898Checker Check all Network I...

Malicious Package

maleficent contains malicious code. The code when executed in the browser would capture environment variables, OS information, network interface, AWS credentials, npm credentials and ssh keys. It also subsequently prints the information to a local file...

OPENSUSE-SU-2020:1190-1 Security update for xen

This update for xen fixes the following issues: - bsc1174543 - secure boot related fixes - bsc1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached This update was imported from the SUSE:SLE-15-SP2:Update update project...

python-psutil: Double free because of refcount mishandling

A double free issue has been discovered in python-psutil because of the mishandling of refcounts while converting system data into Python objects in functions like psutildiskpartitions, psutilusers, psutilnetifaddrs, and others. In particular cases, a local attacker may be able to get code...

Moderate: Red Hat Security Advisory: containernetworking-plugins security update

An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Network Interface Cards from DoS

The vulnerability of Cisco Firepower Threat Defense’s microprogrammed network interface controllers is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by creating a large number of remote management connections on the...

Network Interface Systems in Data Compromise

The vulnerability of Cisco Firepower Threat Defense’s microprogrammed network interface controllers is related to lack of access control. Exploiting this vulnerability allows a malicious actor to influence the integrity of protected information by using a specially created remote management traff...

Network Interface Systems in Code Execution

The vulnerability of Cisco Firepower Threat Defense’s microprogrammed network interface controllers is related to lack of access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...

Cisco Firepower Threat Defense SSL/TLS DoS

The vulnerability of the Secure Sockets Layer and Transport Layer Security implementations of Cisco Firepower Threat Defense’s microprogramming-based network interface controllers is related to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability could allow...

LXC Virtualization Access Confidential Data

The vulnerability of the LXC virtualization system relates to an error in providing access to users when requesting the deletion of a network interface. Exploiting this vulnerability allows an attacker to gain access to confidential data...

PT-2020-2648 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 5.2.40 Oracle VM VirtualBox versions prior to 6.0.20 Oracle VM VirtualBox versions prior to 6.1.6 Description: The issue is related to insufficient input validation in the Core component of Oracle VM...

Arbitrary Code Execution

qemu is vulnerable to arbitrary code execution. A heap overflow flaw was found in the way QEMU-KVM emulated the e1000 network interface card. A privileged guest user in a virtual machine whose network interface is configured to use the e1000 emulated driver could use this flaw to crash the host o...

CVE-2019-14816

A vulnerability was found in the Linux kernel's Marvell WiFi chip driver. Where, while parsing vendor-specific informational attributes, an attacker on the same WiFi physical network segment could cause a system crash, resulting in a denial of service, or potentially execute arbitrary code. This...

CVE-2020-10866

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to enumerate the network interfaces and access points from a Low Integrity process via RPC...

PT-2020-12385

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 20 Description An issue was discovered that allows attackers to enumerate network interfaces and access points from a Low Integrity process via RPC, specifically through the aswTask RPC endpoint for the TaskEx...

Huawei USG6330 USG9500 Tampering System Files

The vulnerability of the microprogrammed network interface card software in Huawei USG6330 and USG9500 lies in the lack of integrity checks. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of system files using specially crafted update files...

Huawei USG9500 Data Compromise

The vulnerability of Huawei USG9500’s microprogramming network interface card is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Remote Code Execution (RCE)

Apache cassandra is vulnerable to remote code execution. The vulnerability exists due to the use of a default JMX configuration of unauthenticated JMX/RMI interface to all network interfaces. Therefore, anyone with access to the interface is allowed to listen to the RMI and to trigger a remote...

Improper access control

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50AAHH.0C0. Through an undocumented sequence of keypresses, undocumented functionality is triggered. A diagnostics shell is triggered via CTRL-ALT-t, which prompts for the password returned by fdssyspassDebugPasswdret. The...

Technicolor TC7300.B0 - 'hostname' Persistent Cross-Site Scripting

Exploit Title: Technicolor TC7300.B0 - 'hostname' Persistent Cross-Site Scripting Google Dork: N/A Date: 2019-11-11 Exploit Author: Luis Stefan Vendor Homepage: https://www.technicolor.com/ Software Link: N/A Version: TC7300.B0 - STFA.51.20 Tested on: macOS Mojave and Catalina CVE : !/usr/bin/env...