PT-2019-4098 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.11 Description: The issue is related to a memory leak in the cx23888 ir probe function, which can lead to uncontrolled resource consumption. This can be exploited by a remote attacker to cause a denial of...

PT-2019-4204 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.11 Description: The issue is related to two memory leaks in the rtl usb probe function in the Linux kernel, which can cause a denial of service due to memory consumption. This can be exploited by attackers t...

PT-2019-4229 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.3.11 Description: The issue is related to a memory leak in the fsl lpspi probe function in the Linux kernel, which can cause a denial of service due to memory consumption. This can be triggered by failures in p...

PT-2019-4207 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.3.11 Description: A memory leak in the spi gpio probe function in drivers/spi/spi-gpio.c allows attackers to cause a denial of service by triggering devm add action or reset failures. This issue is disputed by...

The vulnerability of the usb_audio_probe function in the Linux operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the usbaudioprobe function in the Linux kernel’s sound/usb/card.c file is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure due to the use of a malicious USB Sound device...

PT-2019-4416 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.8 Description: A memory leak in the ca8210 probe function allows attackers to cause a denial of service by triggering ca8210 get platform data failures. This issue is related to uncontrolled resource...

CVE-2019-14238

On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...

Code injection

On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...

CVE-2019-14238

On STMicroelectronics STM32F7 devices, the Proprietary Code Read Out Protection (PCROP) can be defeated by a debug probe through the ITCM bus, exposing the software IP protection mechanism. Affected component: PCROP in STM32F7. Root cause: PCROP can be bypassed via a debug interface to the ITCM p...

CVE-2019-14238

On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...

SKA - Simple Karma Attack

SKA allows you to implement a very simple and fast karma attack. You can sniff probe requests to choice the fake AP name or, if you want, you could insert manually the name of the AP evil twin attack. When the target has connected to your WLAN you could active the HTTP redirection and perform a...

Security Bulletin: A vulnerability has been identified in Apache Camel shipped with IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework (CVE-2019-0194)

Summary Apache Camel is shipped as a component of IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework. Information about security vulnerabilities affecting Apache Camel has been published. The Netcool/OMNIbus Probe DSL Factory Framework is a dependency of the following Netcool/OMNIbus...

Sudomy - Subdomain Enumeration & Analysis

Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way. Features For recent time,Sudomy has these 9 features: Easy, light, fast and powerful. Bash script is available by default in almost all Linux distributions...

Linux kernel null pointer dereference vulnerability (CNVD-2019-32359)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A null pointer dereference vulnerability exists in the flexcopusbprobe function in the...

DEBIAN-CVE-2019-15291

An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcopusbprobe function in the drivers/media/usb/b2c2/flexcop-usb.c driver...

UBUNTU-CVE-2019-15291

An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcopusbprobe function in the drivers/media/usb/b2c2/flexcop-usb.c driver...

ALPINE-CVE-2019-10161

It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use...

CVE-2019-10161

It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use...

The vulnerabilities of Cisco FindIT Network Management and Cisco FindIT Network Probe, which are used for configuring and controlling wired and wireless networks, allow attackers to increase their privileges.

The vulnerability of virtual machine systems for Cisco FindIT Network Management and Cisco FindIT Network Probe involves the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to gain increased privileges...

ZZZCMS V1.7.2 version of the background of the existence of arbitrary file reading vulnerability

zzcms is a free and open source building system, mainly facing the majority of webmasters to use. ZZZCMS V1.7.2 there are arbitrary file reading vulnerabilities in the background. An attacker can exploit the vulnerability to read arbitrary files and conduct intranet probes...