Lucene search
+L

4172 matches found

BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•12 views

The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.

The vulnerability in the tvbrawtextadd function within the MEGACO dissector’s code, located in epan/dissectors/packet-megaco.c, allows malicious actors operating remotely to trigger a service failure hang by using an empty string...

5CVSS5.5AI score0.03058EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•16 views

The vulnerability of the Linux operating system, which allows a malicious individual to gain access to protected information

The function rawcmdcopyout in the file /drivers/block/floppy.c contains an error in the handling of permissions for accessing memory pointers during the execution of the system call FDRAWCMD. This allows a malicious individual to gain access to information stored in the dynamic memory of the...

7.2CVSS6.7AI score0.00452EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•17 views

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure or increase their privileges.

The Linux operating system contains a vulnerability related to errors in processing system calls. Exploiting this vulnerability allows for performing service failures or increasing privileges when executing the system call FDRAWCMD ioctl...

7.2CVSS6.6AI score0.00452EPSS
SaveExploits0References3Affected Software1
exploitpack
exploitpack
•added 2016/05/17 12:00 a.m.•21 views

Adobe Flash - Overflow in Processing Raw 565 Textures

Adobe Flash - Overflow in Processing Raw 565 Textures Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=792 There is an overflow in the processing of raw 565 textures in ATF processing. To reproduce the issue, load the attach file '70' using LoadImage.swf as follows:...

0.9AI score
SaveExploits0
zdt
zdt
•added 2016/05/17 12:00 a.m.•61 views

Adobe Flash - Overflow in Processing Raw 565 Textures

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=792 There is an overflow in the processing of raw 565 textures in ATF processing. To reproduce the issue, load the attach file '70' using LoadImage.swf as follows:...

7.6CVSS7.4AI score0.37716EPSS
SaveExploits2
Exploit DB
Exploit DB
•added 2016/05/17 12:00 a.m.•39 views

Adobe Flash - Overflow in Processing Raw 565 Textures

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=792 There is an overflow in the processing of raw 565 textures in ATF processing. To reproduce the issue, load the attach file '70' using LoadImage.swf as follows: LoadImage.swf?img=70 Proof of Concept:...

7.6CVSS7.4AI score0.37716EPSS
SaveExploits2
OSV
OSV
•added 2016/04/12 2:59 p.m.•15 views

DEBIAN-CVE-2016-2140

The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...

5.3CVSS5.3AI score0.02108EPSS
SaveExploits0References1
OSV
OSV
•added 2016/04/12 2:59 p.m.•18 views

CVE-2016-2140

The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...

5.3CVSS4.9AI score
SaveExploits0References4
Prion
Prion
•added 2016/04/12 2:59 p.m.•22 views

Code injection

The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...

3.5CVSS6.6AI score0.02108EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2016/04/12 1:59 a.m.•13 views

DEBIAN-CVE-2015-5158

Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAPSYSRAWIO permissions to cause a denial of service instance crash via an invalid opcode in a SCSI command descriptor block...

5.5CVSS7.3AI score0.00434EPSS
SaveExploits0References1
OSV
OSV
•added 2016/04/12 12:00 a.m.•11 views

UBUNTU-CVE-2016-2140

The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...

5.3CVSS6.5AI score0.02108EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2016/04/12 12:00 a.m.•11 views

PT-2016-5023

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions prior to 2015.1.4 kilo OpenStack Compute Nova versions 12.0.x prior to 12.0.3 liberty Description The issue allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or...

5.3CVSS6.7AI score0.02108EPSS
SaveExploits0References47
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/12 12:00 a.m.•4 views

CVE-2016-2140: Exposure of Sensitive Information to an Unauthorized Actor

The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...

5.3CVSS6.6AI score0.02108EPSS
SaveExploits0References2
OSV
OSV
•added 2016/04/07 7:59 p.m.•7 views

DEBIAN-CVE-2016-1714

The 1 fwcfgwrite and 2 fwcfgread functions in hw/nvram/fwcfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAPSYSRAWIO privilege to cause a denial of service out-of-bounds read or write access and process crash or possibly...

8.1CVSS9.4AI score0.06085EPSS
SaveExploits0References1
Talos
Talos
•added 2016/03/31 12:00 a.m.•48 views

Lhasa lha decode_level3_header Heap Corruption Vulnerability

SUMMARY An exploitable integer underflow exists during calculation size for all headers in decodelevel3header function of Lhasa lha application. Smaller value of headerlen than LEVEL3HEADERLEN 32 cause during subtraction integer underflow and lead later to memory corruption via heap based buffer...

7.8CVSS8AI score0.03228EPSS
SaveExploits1
Hacker One
Hacker One
•added 2016/03/28 2:49 a.m.•22 views

Internet Bug Bounty: Integer Overflow in php_raw_url_encode

https://bugs.php.net/bug.php?id=71798...

6.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2016/03/08 10:53 p.m.•13 views

openstack-nova: Host data leak through resize/migration

An information-exposure flaw was found in the OpenStack Compute nova resize and migrate functionality. An authenticated user could write a malicious qcow header to an ephemeral or root disk, referencing a block device as a backing file. With a subsequent resize or migration, file system content o...

5.3CVSS5.7AI score0.02108EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2016/03/08 10:53 p.m.•13 views

openstack-nova: Host data leak through resize/migration

An information-exposure flaw was found in the OpenStack Compute nova resize and migrate functionality. An authenticated user could write a malicious qcow header to an ephemeral or root disk, referencing a block device as a backing file. With a subsequent resize or migration, file system content o...

5.3CVSS5.7AI score0.02108EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2016/01/07 11:21 p.m.•204 views

Winpayloads - Undetectable Windows Payload Generation

Undetectable Windows Payload Generation with extras Running on Python2.7 Getting Started git clone https://github.com/Charliedean/Winpayloads cd WinPayloads sudo ./setup.sh python WinPayloads.py Menu 1 Windows Reverse ShellStageless Shellter 2 Windows Reverse MeterpreterStaged Shellter, UacBypass...

9.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2016/01/06 12:00 a.m.•88 views

Debian DSA-3434-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. - CVE-2015-7513 It was discovered that a local user permitted to use the x86 KVM subsystem could configure the PIT emulation to cause a denial of servic...

8.2CVSS6AI score0.0122EPSS
SaveExploits2References30
Rows per page
Query Builder