CVE-2022-2590-analysis

CVE-2022-2590，受限与 shmem 的 Dirty COW linux 内核版本：Linux/x86 6.0.0-rc1（提交 37887783b3fef877bf34b8992c9199864da4afcb） 介绍： 此漏洞允许攻击者通过满足函数 canfollowwritepte（该函数检查 FOLLFORCE、FOLLCOW 和 ptedirty）的条件，使用 UFFDIOCONTINUE 向只读共享内存页面写入任意内容。 分析： / FOLLFORCE 可以写入甚至不可写的 pte，但 仅在我们经过 COW 周期且 pte 为脏之后。 / static inline...

EUVD-2026-42870

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: preserve shared-frag marker in iptfsconsumefrags iptfsconsumefrags transfers paged fragments from one socket buffer to another but fails to propagate the SKBFLSHAREDFRAG flag. This is the same class of bug that was...

EUVD-2019-7629

Malware in sbrugna...

CVE-2019-17207

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker aka Broken Link Checker plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the...

Cross site scripting

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker aka Broken Link Checker plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the...

Foxit PhantomPDF Denial of Service Vulnerability (CNVD-2019-24200)

PhantomPDF is a multifunctional PDF editor. A denial of service vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10 when deleting pages from a document containing only one page by calling the "t.hidden = true" function. An attacker can exploit this vulnerability to cause a denial of...