Lucene search
+L

1722 matches found

zdt
zdt
added 2021/04/07 12:0 a.m.235 views

OpenBSD OpenSMTPD 6.6 Remote Code Execution Exploit

smtpmailaddr in smtpsession.c in OpenSMTPD version 6.6, as used in OpenBSD version 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default...

9.8CVSS9.8AI score0.98946EPSS
SaveExploits27
Packet Storm
Packet Storm
added 2021/04/06 12:0 a.m.539 views

OpenBSD OpenSMTPD 6.6 Remote Code Execution

Exploit Title: OpenBSD OpenSMTPD Remote Code Execution Vulnerability Date: 05/04/2021 Exploit Author: Tobias Marcotto Tested on: Kali Linux x64 Version: 6.6 Description: smtpmailaddr in smtpsession.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute...

10CVSS0.2AI score0.98946EPSS
SaveExploits27
Fedora
Fedora
added 2021/03/23 12:18 a.m.64 views

[SECURITY] Fedora 34 Update: openssh-8.5p1-2.fc34

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

7.1CVSS2AI score0.03422EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/03/19 12:0 a.m.89 views

FreeBSD : OpenSSH -- Double-free memory corruption in ssh-agent (76b5068c-8436-11eb-9469-080027f515ea)

OpenBSD Project reports : ssh-agent1: fixed a double-free memory corruption that was introduced in OpenSSH 8.2 . We treat all such memory faults as potentially exploitable. This bug could be reached by an attacker with access to the agent socket. On modern operating systems where the OS can provi...

7.1CVSS7.3AI score0.03422EPSS
SaveExploits1References3
NCSC
NCSC
added 2021/03/04 12:0 a.m.5 views

Vulnerability fixed in OpenSSH

A vulnerability has been fixed in OpenSSH. The vulnerability allows a malicious party with access to the SSH agent socket to cause a Denial-of-Service and potentially execute arbitrary code. execute. No CVE attribute has been reserved for this vulnerability yet. The developers of OpenSSH have...

7.1AI score
SaveExploits0
GithubExploit
GithubExploit
added 2021/02/13 6:57 a.m.175 views

Exploit for Improper Handling of Exceptional Conditions in Openbsd Opensmtpd

CVE-2020-7247-exploit OpenSMTPD 6.4.0 -...

10CVSS9.8AI score0.98946EPSS
SaveExploits27
OpenVAS
OpenVAS
added 2021/02/01 12:0 a.m.14 views

Fedora: Security Advisory for opensmtpd (FEDORA-2021-848fd34b0b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.7AI score
SaveExploits0References2
Fedora
Fedora
added 2021/01/30 1:42 a.m.98 views

[SECURITY] Fedora 32 Update: opensmtpd-6.8.0p2-1.fc32

OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defi ned by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTP...

7.5CVSS0.8AI score0.03578EPSS
SaveExploits0
CNNVD
CNNVD
added 2020/12/24 12:0 a.m.7 views

Openbsd Opensmtpd Security Vulnerability

Openbsd Opensmtpd is an RFC 5321-based SMTP server software from the Openbsd organization. A security vulnerability exists in OpenSMTPD versions prior to 6.8.0p1, which stems from the lack of a specific regfree in smtpd/table.c, and can be exploited by an attacker to trigger a "very severe" memor...

7.5CVSS7.1AI score0.02835EPSS
SaveExploits0References10
GithubExploit
GithubExploit
added 2020/11/29 5:36 p.m.147 views

Exploit for Race Condition in Openbsd Openssh

CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2...

5.3CVSS9.1AI score0.98631EPSS
SaveExploits24
Tenable Nessus
Tenable Nessus
added 2020/11/23 12:0 a.m.13 views

Fedora 33 : rpki-client (2020-f30b30c2d8)

rpki-client 6.8p1 ================= This is the second release based on OpenBSD 6.8. It includes the following changes to the previous release : - Incorporate OpenBSD 6.8 errata 006 of November 10, 2020: rpki-client incorrectly checks the manifest validity interval. In the portable version : - Ad...

5.6AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/11/23 12:0 a.m.18 views

Fedora 32 : rpki-client (2020-538e0ee110)

rpki-client 6.8p1 ================= This is the second release based on OpenBSD 6.8. It includes the following changes to the previous release : - Incorporate OpenBSD 6.8 errata 006 of November 10, 2020: rpki-client incorrectly checks the manifest validity interval. In the portable version : - Ad...

5.6AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/11/23 12:0 a.m.18 views

Fedora 31 : rpki-client (2020-ce591c8f46)

rpki-client 6.8p1 ================= This is the second release based on OpenBSD 6.8. It includes the following changes to the previous release : - Incorporate OpenBSD 6.8 errata 006 of November 10, 2020: rpki-client incorrectly checks the manifest validity interval. In the portable version : - Ad...

5.6AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/11/22 12:0 a.m.5 views

Fedora: Security Advisory for rpki-client (FEDORA-2020-538e0ee110)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/11/22 12:0 a.m.5 views

Fedora: Security Advisory for rpki-client (FEDORA-2020-f30b30c2d8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2020/11/21 1:52 a.m.14 views

[SECURITY] Fedora 31 Update: rpki-client-6.8p1-1.fc31

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

1.3AI score
SaveExploits0
Fedora
Fedora
added 2020/11/21 1:46 a.m.21 views

[SECURITY] Fedora 32 Update: rpki-client-6.8p1-1.fc32

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

1.3AI score
SaveExploits0
Fedora
Fedora
added 2020/11/21 1:31 a.m.14 views

[SECURITY] Fedora 33 Update: rpki-client-6.8p1-1.fc33

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

1.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/10/01 12:0 a.m.70 views

macOS 10.15.x < 10.15.6 / 10.14.x < 10.14.6 Security Update 2020-004 / 10.13.x < 10.13.6 Security Update 2020-004

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2020-004, 10.14.x prior to 10.14.6 Security Update 2020-004, or 10.15.x prior to 10.15.6. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability wa...

10CVSS7.3AI score0.08036EPSS
SaveExploits13References75
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:0 a.m.8 views

The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf which allows local users to obtain sensitive community information by reading this file.

...

2.1CVSS7.2AI score0.0054EPSS
SaveExploits2
Rows per page
Query Builder