kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption

An out-of-bounds OOB memory access flaw was found in the Network XDP the eXpress Data Path module in the Linux kernel's xdpumemreg function in net/xdp/xdpumem.c. When a user with special user privilege of CAPNETADMIN or root calls setsockopt to register umem ring on XDP socket, passing the headro...

PT-2020-16190

Name of the Vulnerable Software and Affected Versions Western Digital My Cloud Devices versions prior to 5.4.1140 Description The issue is related to a remote code execution vulnerability due to insufficient validation of user input in the reg device.php file. This vulnerability can be exploited,...

An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.

...

CVE-2020-11474

NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant...

DEBIAN-CVE-2020-12659

An issue was discovered in the Linux kernel before 5.6.7. xdpumemreg in net/xdp/xdpumem.c has an out-of-bounds write by a user with the CAPNETADMIN capability because of a lack of headroom validation...

UBUNTU-CVE-2020-12659

An issue was discovered in the Linux kernel before 5.6.7. xdpumemreg in net/xdp/xdpumem.c has an out-of-bounds write by a user with the CAPNETADMIN capability because of a lack of headroom validation...

PT-2020-2225 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.6.7 Description: An issue in the Linux kernel allows for an out-of-bounds write due to a lack of headroom validation in xdp umem reg in net/xdp/xdp umem.c. This can be exploited by a user with the CAP NET ADMI...

CVE-2017-18644

An issue was discovered on Samsung mobile devices with L5.1, M6.x, and N7.x software. There is a muicsetregsel heap-based buffer overflow during the reading of MUIC register values. The Samsung ID is SVE-2017-10011 December 2017...

PT-2020-22879

Уязвимость редактора реестра операционной системы Windows связана с ошибками проверки входных данных при внесении изменений в реестр. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код в результате открытия пользователем специально сформированног...

PT-2019-19887

Name of the Vulnerable Software and Affected Versions VFront version 0.99.5 Description The issue concerns a stored XSS that occurs via the azzera parameter in the "admin/sync reg tab.php" page, which is mishandled during the rendering of "admin/error log.php". Recommendations For VFront version...

PT-2019-19888

Name of the Vulnerable Software and Affected Versions VFront version 0.99.5 Description The issue concerns a Reflected XSS that can be triggered via specific parameters in certain PHP files. Specifically, the descrizione g parameter in the "admin/menu registri.php" file or the azzera parameter in...

PT-2019-7840

Name of the Vulnerable Software and Affected Versions Capstone version 3.0.4 Description The issue is related to an out-of-bounds vulnerability, which causes a segmentation fault due to a read memory access in the X86 insn reg intel function located in arch/X86/X86Mapping.c. Recommendations For...

PT-2019-20115

Name of the Vulnerable Software and Affected Versions Capstone version 3.0.4 Description The issue is related to an out-of-bounds vulnerability in the X86 insn reg intel function located in arch/X86/X86Mapping.c, which can cause a segmentation fault due to a read memory access. Recommendations Fo...

Rockwell Automation 1756-REG/A Specialty I/O

Binary data 753758.prm...

Microsoft Windows - .reg File Dialog Box Message Spoofing

Microsoft Windows - .reg File Dialog Box Message Spoofing + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-.REG-FILE-DIALOG-BOX-MESSAGE-SPOOFING.txt + ISR: ApparitionSec Vendor www.microsoft.com Product A...

Microsoft Windows .Reg File / Dialog Box Message Spoofing

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-.REG-FILE-DIALOG-BOX-MESSAGE-SPOOFING.txt + ISR: ApparitionSec Vendor www.microsoft.com Product A file with the .reg file extension is a Registration file...

CVE-2018-20729

A reflected cross site scripting XSS vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via the reg parameter in mh.php...

PT-2019-10187

Name of the Vulnerable Software and Affected Versions: NeDi versions prior to 1.7Cp3 Description: A reflected cross site scripting issue allows remote attackers to inject arbitrary web script or HTML via the reg parameter in "mh.php". Recommendations: For versions prior to 1.7Cp3, update to versi...

CVE-2018-20729: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting XSS vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via the reg parameter in mh.php...

PT-2019-18100 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8 Description: A memory leak was found in the rec aggregate reg new function in rec-aggregate.c within librec.a. Recommendations: For GNU Recutils version 1.8, consider updating to a newer version that addresses the...