Arbitrary File Write

hplip is vulnerable to arbitrary file write. A local attacker could use these flaws to perform a symbolic link attack, overwriting arbitrary files accessible to a process using HPLIP...

kubernetes: authentication/authorization bypass in the handling of non-101 responses

A privilege escalation vulnerability exists in OpenShift Container Platform which allows for compromise of pods running co-located on a compute node. This access could include access to all secrets, pods, environment variables, running pod/container processes, and persistent volumes, including in...

SUSE-SU-2018:2088-1 Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606454 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data fro...

SUSE-SU-2018:2102-1 Security update for the Linux Kernel (Live Patch 26 for SLE 12)

This update for the Linux Kernel 3.12.61-5289 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

GHSA-WW6V-677G-P656 Sandbox Breakout in safe-eval

Affected versions of safe-eval are vulnerable to a sandbox escape. By accessing object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox. Proof of Concept: This code accesses the process object and calls .exit js var safeEval =...

CVE-2017-5708

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector...

rzpnk.sys IOCTL Process Descriptor

The vulnerability of the rzpnk.sys driver, a IOCTL handler for configuring a cloud-based system, is related to deficiencies in access control for the ZwOpenProcess procedure. Exploiting this vulnerability allows a malicious actor to open a descriptor for an arbitrary process remotely...

PT-2017-2839

Name of the Vulnerable Software and Affected Versions Razer Synapse version 2.20.15.1104 Description The issue is related to a specially crafted IOCTL that can be issued to the rzpnk.sys driver, allowing a handle to be opened to an arbitrary process through ZwOpenProcess. This is due to...

Oracle Java Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the creation of an...

Moderate: Red Hat Bug Fix Advisory: mod_nss bug fix update

Updated modnss packages that fix multiple bugs are now available for Red Hat Enterprise Linux 5. The modnss module provides strong cryptography for the Apache HTTP Server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, using the Network Security Services NSS security...

CVE-2011-1534: Undefined Security Weakness

Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x allows remote authenticated users to obtain access to processes via unknown vectors...

PT-2011-3195

Name of the Vulnerable Software and Affected Versions HP Network Node Manager i NNMi versions 9.0x Description The issue allows remote authenticated users to obtain access to processes. The exact vectors of the issue are not specified. Recommendations For HP Network Node Manager i NNMi versions...

Windows Escalate Locked Desktop Unlocker

This module unlocks a locked Windows desktop by patching the respective code inside the LSASS.exe process. This patching process can result in the target system hanging or even rebooting, so be careful when using this module on production systems. This module requires Metasploit:...

FreeBSD jail_attach jail protection bypass

Process from one jail may enter into different jail via jailattach...

DebPloit (exploit)

DebPloit allows Everyone to get handle to Any process or thread. Handles have enough access to promote everyone to system/admin in the case Target is running under LocalSystem, Administrator account. Works on: Any MS Windows NT 4.0, Windows 2000 SPs before Mar-12-2002. Former NTs weren't tested...

Переполнение буфера при длинном имени файла в Trustees

Переполнение буфера при длинном имени файла приводит к DoS против самого процесса и всех процессов, пытающихся обратиться к нему через /proc...