AMD System Management Unit 缓冲区错误漏洞

AMD System Management Unit SMU is a system management unit of AMD, Inc. A security vulnerability exists in the System Management Unit SMU PCIe Hot Plug, which can be exploited by an attacker to cause a denial of service for invalid address space access or updates...

CVE-2021-26332

Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability...

CVE-2021-26352

Insufficient bound checks in System Management Unit SMU PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service...

Cross-site Scripting (XSS) in create space function

Description Reflected cross-site scripting or XSS arises when an application receives data in an HTTP request and includes that data within the immediate response in an unsafe way. Proof of Concept 1.Login as normal user. 2.Access subdomain /space/create/create. 3.Input name, color, description,...

PT-2022-7669 · Realtek · Realtek Rtsuer Driver

Name of the Vulnerable Software and Affected Versions: Realtek RtsPer driver for PCIe Card Reader versions prior to 10.0.22000.21355 Realtek RtsUer driver for USB Card Reader versions prior to 10.0.22000.31274 Description: The issue is related to insufficient input validation in the Realtek SD ca...

Fuchsia 输入验证错误漏洞

Fuchsia is an open source general purpose operating system. Fuchsia has a security vulnerability that stems from the presence of an integer overflow vulnerability. An attacker could issue a memory cache invalidation operation on a page they do not own, allowing them to control kernel memory from...

CVE-2022-24706

creationtimestamp| type| source ---|---|--- 2022-04-26 14:36:58+00:00| seen| https://t.me/cibsecurity/41424 2022-04-28 17:51:45+00:00| published-proof-of-concept| https://t.me/cKure/9439 2022-04-29 17:20:21+00:00| published-proof-of-concept| https://t.me/ShlezySecChannel/39 2022-05-22...

SureBackup VM Power On fails with: "Failed to extend swap file" or "Error: Insufficient resources."

Challenge A SureBackup job, for a VMware environment, fails during the VM Power On step with either of the following errors: Error: Module 'MonitorLoop' power on failed. Module 'MonitorLoop' power on failed. Failed to extend swap file...

CVE-2022-1364

creationtimestamp| type| source ---|---|--- 2022-04-15 08:56:41+00:00| exploited| https://t.me/cKure/9368 2022-04-15 11:36:01+00:00| exploited| https://t.me/truesecator/2853 2022-04-17 12:32:15+00:00| exploited| https://t.me/CybersecurityCourse/189 2022-04-18 01:07:08+00:00| exploited|...

CVE-2022-28345

The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders RTLO encoded URLs beginning with a non-breaking space, when there is a hash character in the URL. This technique allows a remote unauthenticated attacker to send legitimate looking links, appearing t...

The vulnerability of the microprogramming driver for motherboard, asRock AsrDrv103.sys, related to errors in user space restrictions, allows a hacker to execute arbitrary code in the Windows kernel.

The vulnerability of the microprogrammed driver for motherboard, asRock AsrDrv103.sys, is related to errors in memory protection. Exploiting this vulnerability allows an attacker to execute arbitrary code in the Windows kernel...

VulnCheck KEV: CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

CVE-2022-28255

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28266

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28251

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28252

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28261

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28265

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28262

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28245

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...