6114 matches found
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Struts
This post is a research article published by EQSTLabhttps://g...
PT-2026-2865
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the KVM hypervisor and its handling of the periodic HV timer. Specifically, when resuming a virtual machine after a prolonged period of...
Exploit for CVE-2024-9933
CVE-2024-9933 Usage Usage: python CVE-2024-9933 .py option...
SUSE SLES15 Security Update : gdb (SUSE-SU-2024:4413-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4413-1 advisory. Mention changes in GDB 14: GDB now supports the AArch64 Scalable Matrix Extension 2 SME2, which includes a new 512 bit lookup table register...
Security update for gdb
This update for gdb fixes the following issues: Mention changes in GDB 14: GDB now supports the AArch64 Scalable Matrix Extension 2 SME2, which includes a new 512 bit lookup table register named ZT0. GDB now supports the AArch64 Scalable Matrix Extension SME, which includes a new matrix register...
SUSE-SU-2024:4414-1 Security update for gdb
This update for gdb fixes the following issues: Mention changes in GDB 14: GDB now supports the AArch64 Scalable Matrix Extension 2 SME2, which includes a new 512 bit lookup table register named ZT0. GDB now supports the AArch64 Scalable Matrix Extension SME, which includes a new matrix register...
Security update for gdb
This update for gdb fixes the following issues: Mention changes in GDB 14: GDB now supports the AArch64 Scalable Matrix Extension 2 SME2, which includes a new 512 bit lookup table register named ZT0. GDB now supports the AArch64 Scalable Matrix Extension SME, which includes a new matrix register...
Exploit for Code Injection in Craftcms Craft_Cms
Before you run script again do fuser -k 6666/tcp...
Directory Traversal
pythonlibarchive is vulnerable to Directory Traversal. The vulnerability is due to insufficient sanitization of file paths during the extraction process, which fails to properly handle or restrict the traversal of directory paths, allowing attackers to use special characters such as ../ to escape...
Misskey 输入验证错误漏洞
Misskey is a perpetually free open source federated social media platform from Misskey Open Source. An input validation error vulnerability exists in Misskey versions 12.29.0 through prior to 2024.11.0-alpha.3, which stems from a lack of validation and allows an attacker to take control of a targ...
Subnet mask missing in Windows once PVS target is booted via BDM
When booting a PVS target using a BDM with static IP and having DHCP enabled in the vdisk, Windows may be missing its subnet mask...
Exploit for Path Traversal in Grafana
Automated Exploit Tool for Grafana CVE-2021-43798 !Previewi...
Microsoft Office Remote Code Execution Vulnerability (CNVD-2024-49214)
Microsoft Office is a set of office software suite developed by Microsoft Microsoft, commonly used components such as Word, Excel, PowerPoint, and so on. A remote code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute code on the target host...
scsi: target: core: Fix null-ptr-deref in target_alloc_device()
...
AZL-54233 CVE-2024-11053 affecting package mysql for versions less than 8.0.41-1
When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...
Microsoft Office 缓冲区错误漏洞
Microsoft Office is a set of office software suite developed by Microsoft Microsoft, commonly used components such as Word, Excel, PowerPoint, and so on. A remote code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute code on the target host...
Adobe Connect 输入验证错误漏洞
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe Connect, which stems from the system's failure to appropriately handle target jumps, and can be exploited by an attacker to redirect a use...
Exploit for Command Injection in Materialsvirtuallab Pymatgen
!imagehttps://github.com/user-attac...
