McAfee Security Scan Plus Living off the Land Attack

The vulnerability of the McAfee Security Scan Plus MSS+ antivirus software is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to execute a LotL attack a type of Living off the Land attack...

CVE-2021-3999: Off-by-one Error

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...

PT-2022-7359 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel io uring module affected versions not specified Description: The issue is related to an off-by-one error in the io uring module, specifically affecting the io sync cancel function in the io uring/cancel.c component. This error is...

CVE-2020-27793

An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...

UBUNTU-CVE-2020-27793

An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...

CVE-2020-27793

An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...

CVE-2020-27793

CVE-2020-27793 concerns radare2, due to an off-by-one overflow from a mismatched array length in core_java.c. The flaw can cause a crash and enable a denial-of-service condition. The NVD entry lists a CVSSv3.1 base score of 7.5 ( HIGH ) with network attack vector, low complexity, no privileges re...

CVE-2020-27793

An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...

CVE-2020-27793

An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...

OESA-2022-1851 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI...

CVE-2020-27793: Off-by-one Error

An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...

CVE-2022-37025

An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...

CVE-2022-37025

An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...

CVE-2022-37025

CVE-2022-37025 affects McAfee Security Scan Plus (MSS+) prior to 4.1.262.1. The vulnerability is described as improper privilege management that could let a local user modify a configuration file and perform a LOLBin (Living off the Land) attack, enabling elevated permissions and potential arbitr...

PT-2022-4243

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0218 Description The issue is related to the utf head off function in the Vim text editor, which lacks buffer length checks and can lead to out-of-bounds memory reads. This can potentially allow an attacker to impact...

PT-2022-7377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an off-by-one error in the unflatten dt nodes function, which can lead to an overflow of the nps buffer. This was discovered by the Linux Verification Center usin...

CVE-2022-30216 - Authentication coercion of the Windows ?Server? service

In this blog, see how an off-by-one error could lead to domain controller access in Microsoft Server Service...

CVE-2022-30216 - Authentication coercion of the Windows “Server” service

In this blog, see how an off-by-one error could lead to domain controller access in Microsoft Server Service...

CVE-2022-2242

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled default...

SAP SuccessFactors Mobile Privilege Bypass

The vulnerability of the implementations of Time Off, Time Sheet, EC Workflow, and Benefits modules of the SAP SuccessFactors Mobile human resources management platform for Android and iOS operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow a...