UBUNTU-CVE-2022-0488

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes...

CVE-2022-0488

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes...

CVE-2022-0488

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes...

CVE-2022-0488

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes...

CVE-2022-0488

Removed by vendor...

CVE-2022-0488

GitLab CE/EE (versions starting with 8.10) is affected by CVE-2022-0488: a denial-of-service vulnerability where a crafted amount of block-quotes in Markdown can trigger a page timeout. The issue arises from mishandling a large number of block references, leading to an exploitable DoS condition. ...

PT-2022-13210 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.10 and later Description: An issue has been discovered in GitLab CE/EE where it is possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes. Recommendations: For GitLab CE/EE...

CVE-2022-0488: Uncontrolled Resource Consumption

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes...

PT-2022-9228

Name of the Vulnerable Software and Affected Versions Cloud Foundry CAPI versions prior to 1.122 Description A denial-of-service attack is possible, where a developer can push a service broker that causes CC instances to timeout and fail. This can be done accidentally or maliciously, allowing an...

GSD-2022-1000765 mptcp: Correctly set DATA_FIN timeout when number of retransmits is large

mptcp: Correctly set DATAFIN timeout when number of retransmits is large This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.27 by commit...

GSD-2022-1000695 mptcp: Correctly set DATA_FIN timeout when number of retransmits is large

mptcp: Correctly set DATAFIN timeout when number of retransmits is large This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.13 by commit...

PT-2022-29039

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.26 Description The issue concerns the mptcp protocol, where the DATA FIN timeout is not correctly set when the number of retransmits is large. This is an automated ID intended to aid in discovery of...

PT-2022-28969

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.12 Description The issue concerns the mptcp protocol in the Linux Kernel, where the DATA FIN timeout is not correctly set when the number of retransmits is large. The actual impact and attack...

CVE-2022-0667

An assertion check flaw was found in BIND, with a refactoration of recursive client code that introduced a "backstop lifetime timer." While BIND processes a request for a DS record that needs to be forwarded, it waits until this processing is complete or until the backstop lifetime timer has time...

PT-2022-26180

Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.53.0 Description The issue arises when Synapse attempts to generate URL previews for media stream URLs without properly limiting connection time. Connections are only terminated after a certain amount of data max...

Webmin 1.984 Remote Code Execution

Exploit Title: Webmin 1.984 - Remote Code Execution Authenticated Date: 2022-03-06 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://www.webmin.com/ Software Link: https://github.com/webmin/webmin/archive/refs/tags/1.984.zip Version: = 1.984 Tested on: Ubuntu 18...

GONET-Scanner - Golang Network Scanner With Arp Discovery And Own Parser

ScreenShots Install chmod +x install.sh ./install.sh as root Usage ARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports like nmap -t: Set Timeout in milliseconds EXAMPLES go run...

PT-2022-28872

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.4 Description The issue concerns a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-7619 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.1 Description: A vulnerability in the Linux kernel's MPTCP component has been identified, where a large number of DATA FIN retransmits can cause a shift-out-of-bounds in the DATA FIN timeout calculation. Th...

PT-2022-28396

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.227 Description The issue concerns a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...