CVE-2019-19583

An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of service guest OS crash because VMX VMEntry checks mishandle a certain case. Please see XSA-260 for background on the MovSS shadow. Please see XSA-156 for background on the need for DB...

CVE-2019-19583: Undefined Security Weakness

An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of service guest OS crash because VMX VMEntry checks mishandle a certain case. Please see XSA-260 for background on the MovSS shadow. Please see XSA-156 for background on the need for DB...

Snatch Ransomware Reboots Windows in Safe Mode to Bypass Antivirus

Cybersecurity researchers have spotted a new variant of the Snatch ransomware that first reboots infected Windows computers into Safe Mode and only then encrypts victims' files to avoid antivirus detection. Unlike traditional malware, the new Snatch ransomware chooses to run in Safe Mode because ...

EulerOS 2.0 SP2 : shadow-utils (EulerOS-SA-2019-2427)

According to the versions of the shadow-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed...

DEBIAN-CVE-2013-4235

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...

CVE-2013-4235

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...

CVE-2013-4235

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...

Race condition

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...

UBUNTU-CVE-2013-4235

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...

CVE-2013-4235

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...

CVE-2013-4235

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...

CVE-2013-4235

CVE-2013-4235 refers to a shadow-utils TOCTOU (time-of-check-time-of-use) race condition when copying and removing directory trees. The Connected IBM X-Force bulletin lists this CVE with CWE-367, a base score of 3.7, CVSS vector (AV:L/AC:H/Au:N/C:P/I:P/A:P). The Initial description notes the race...

CVE-2013-4235: Time-of-check Time-of-use (TOCTOU) Race Condition

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...

CVE-2013-4235

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...

Shibboleth Service Provider Elevation of Privilege Vulnerability

Shibboleth is an open source SAML-based Web Single Sign-On system for Windows platforms from Shibboleth, U.K. The Service Provider SP is one of the service provider components, which is mainly used to intercept access to protected resources or application entry points, issue SAML authentication...

shadowbroker

This repository, ximakou9/shadowbroker, contains a collection of exploits and tools leaked by the Shadow Brokers. The repository includes a README file that lists the contents of the repository, which includes various exploits and tools, as well as a file listing of the contents of the repository...

CVE-2019-16110

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream...

CVE-2019-16110

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream...

Code injection

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream...

CVE-2019-16110

Blade Shadow up to version 2.13.3 is vulnerable to remote code execution via the network protocol: an attacker who knows the victim’s IP can inject data into the unencrypted UDP stream, potentially taking control of a Shadow instance. Root cause: unprotected UDP packet handling allows arbitrary c...