15855 matches found
CVE-2022-22939: Insertion of Sensitive Information into Log File
VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with root access on VMware Cloud Foundation SDDC Manager may be able to view credentials in plaintext within one or...
Cisco Small Business buffer error vulnerability
Cisco Small Business is a switch from Cisco USA. A buffer error vulnerability exists in the Cisco Small Business RV Series Routers that results from an insufficient authorization enforcement mechanism. An attacker can exploit these vulnerabilities by submitting specific commands to the affected...
Cisco Small Business buffer error vulnerability
Cisco Small Business is a switch from Cisco USA. Cisco Small Business RV Series Routers has buffer error vulnerabilities that result from an insufficient authorization enforcement mechanism. An attacker can exploit these vulnerabilities by submitting specific commands to the affected device...
Cisco Small Business buffer error vulnerability
Cisco Small Business is a switch from Cisco USA. A buffer error vulnerability exists in the Cisco Small Business RV Series Routers that results from an insufficient authorization enforcement mechanism. An attacker can exploit these vulnerabilities by submitting specific commands to the affected...
Exploit for Incorrect Authorization in Polkit_Project Polkit
CVE-2021-3560 Polkit Instant Root Exploit You can run one com...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
PoC exploit for CVE-2021-4034, a local privilege escalation vuln...
PT-2022-2006
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17-rc8 Description An out-of-bounds OOB memory write flaw exists in the watch queue event notification subsystem. This issue allows a local user to overwrite parts of the kernel state, which can lead to a denia...
PT-2022-2298 · Cisco · Rv260 +4
Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV Series Routers versions prior to the fixed version Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description: The issue concerns a stack-based buffer overflow...
Samba ‘Fruit’ Bug Allows RCE, Full Root User Access
A critical severity vulnerability in the Samba platform could allow attackers to gain remote code execution with root privileges on servers. Samba is an interoperability suite that allows Windows and Linus/Unix-based hosts to work together and share file and print services with multi-platform...
Samba patches critical vulnerability that allows remote code execution as root
Samba developers have patched a vulnerability that allows remote attackers to execute arbitrary code as root on affected Samba installations that use the VFS module vfsfruit. Samba is a free software re-implementation of the SMB networking protocol that provides file and print services for variou...
USN-5260-2 samba vulnerability
Orange Tsai discovered that the Samba vfsfruit module incorrectly handled certain memory operations. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service, or possibly execute arbitrary code as root. CVE-2021-44142...
Zyxel Unauthenticated LAN Remote Code Execution
This module exploits a buffer overflow in the zhttpd binary /bin/zhttpd. It is present on more than 40 Zyxel routers and CPE devices. The code execution vulnerability can only be exploited by an attacker if the zhttp webserver is reachable. No authentication is required. After exploitation, an...
(Pwn2Own) Samba fruit_pwrite Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samba. Authentication is not required to exploit this vulnerability. The specific flaw exists within the fruitpwrite function. The issue results from the lack of proper validation of the length of...
ROS-20220128-01
The vulnerability in the Polkit library for UNIX-like operating systems is related to improper handling of the number of call parameters in the pkexec setuid binary, which causes the binary to executes environment variables as commands. Exploitation of the vulnerability could allow an attacker to...
RecoverPy - Interactively Find And Recover Deleted Or Overwritten Files From Your Terminal
You can already find plenty of solutions to recover deleted files, but it can be a hassle to recover overwritten files. RecoverPy searches through every block of your partition to find your request. Demo Installation RecoverPy is currently only available on Linux systems. Dependancies Mandatory...
samba: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution
An out-of-bounds heap read write vulnerability was found in Samba. Due to a boundary error when processing EA metadata while opening files in smbd within the VFS Samba module vfsfruit, a remote attacker with ability to write to file's extended attributes can trigger an out-of-bounds write and...
PT-2022-1610
Name of the Vulnerable Software and Affected Versions VMware Cloud Foundation affected versions not specified Description The issue is related to an information disclosure problem due to the logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with...
Check Point Response to CVE-2021-4034 - local privilege escalation in polkit's pkexec
Symptoms - A Local Privilege Escalation from any user to root was discovered in polkit's pkexec, a SUID-root program that is installed by default on every major Linux distribution. The vulnerability allows unprivileged users to run commands as privileged users according to predefined policies. Fo...
CVE-2022-22790
SYNEL - eharmony Directory Traversal. Directory Traversal - is an attack against a server or a Web application aimed at unauthorized access to the file system. on the "Name" parameter the attacker can return to the root directory and open the host file. The path exposes sensitive files that users...