Trojan-Proxy.Win32.Delf.ai Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/1dd6eb39a388f4c8a3eaf248d86aaabc.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Proxy.Win32.Delf.ai Vulnerability: Remote SEH Buffer Overflow Description: The malware listen...

Intel Trace Analyzer and Collector Improper Search Path

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector is related to incorrect handling of the search path. Exploiting this vulnerability can allow attackers to gain increased privileges...

Oracle Linux 8 : nss (ELSA-2021-0538)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-0538 advisory. - CVE-2020-12403 chacha-poly issues - CVE-2020-12400 constant time ECC. - CVE-2020-6829 constant time ECC. Tenable has extracted the preceding...

AgataSoft PingMaster Pro 2.1 Denial Of Service

Exploit Title: AgataSoft PingMaster Pro 2.1 - Denial of Service PoC Date: 2021-02-15 Exploit Author: Ismael Nava Vendor Homepage: http://agatasoft.com/ Software Link: http://agatasoft.com/PingMasterPro.exe Version: 2.1 Tested on: Windows 10 Home x64 STEPS Open the program AgataSoft PingMaster Pro...

AgataSoft PingMaster Pro 2.1 - Denial of Service Exploit

Exploit Title: AgataSoft PingMaster Pro 2.1 - Denial of Service PoC Exploit Author: Ismael Nava Vendor Homepage: http://agatasoft.com/ Software Link: http://agatasoft.com/PingMasterPro.exe Version: 2.1 Tested on: Windows 10 Home x64 STEPS Open the program AgataSoft PingMaster Pro In Tools select...

UBUNTU-CVE-2020-36244

The daemon in GENIVI diagnostic log and trace DLT, is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the DLT-Daemon versions prior to 2.18.6...

CVE-2020-36244: Out-of-bounds Write

The daemon in GENIVI diagnostic log and trace DLT, is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the DLT-Daemon versions prior to 2.18.6...

PT-2021-11978 · Genivia · Genivi Diagnostic Log/Trace

Name of the Vulnerable Software and Affected Versions: GENIVI Diagnostic Log and Trace DLT versions prior to 2.18.6 Description: The daemon in GENIVI Diagnostic Log and Trace DLT is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the...

GENIVI Diagnostic Log Buffer Error Vulnerability

GENIVI Diagnostic Log is a communication protocol for the GlobalGENIVI community. Log and Trace interfaces are provided. A buffer error vulnerability exists in GENIVI Diagnostic Log and Trace that originates when a networked system or product performs an operation on memory without properly...

PT-2021-2103

Name of the Vulnerable Software and Affected Versions: IntelR FPGA OPAE Driver for Linux versions prior to 4.17 IntelR Trace Analyzer and Collector versions prior to 2020 update 3 Description: The issue is related to improper conditions check and uncontrolled search path, which may allow an...

Intel® Trace Analyzer and Collector Advisory

Summary: A potential security vulnerability in the Intel® Trace Analyzer and Collector may allow an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-31197 Description: Uncontrolled search path in the Inte...

Unibox Cross Site Request Forgery

===================================================== Authenticated XSRF leads to complete Account Takeover ===================================================== . contents:: Table Of Content Overview ======== Title:- Authenticated XSRF leads to complete account takeover in all UNIBOX WiFi Hotspo...

Wireshark 3.4.x < 3.4.3 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.4.3. It is, therefore, affected by vulnerabilities as referenced in the wireshark-3.4.3 advisory. - The USB HID dissector could leak memory. It may be possible to make Wireshark consume excessive CPU resources by...

Wireshark 3.4.x < 3.4.3 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.4.3. It is, therefore, affected by vulnerabilities as referenced in the wireshark-3.4.3 advisory. - The USB HID dissector could leak memory. It may be possible to make Wireshark consume excessive CPU resources by injectin...

Atlassian Bamboo Authorization Issues Vulnerability

Atlassian Bamboo is a Java-based server-side application for continuous integration builds from Atlassian Australia. A security vulnerability exists in Atlassian Bamboo versions prior to 7.2.2 that allows an unauthenticated, remote attacker to view a stack trace...

CVE-2021-26067

Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk and if certain files exists on the tmp directory, via a Sensitive Data Exposure vulnerability in the /chart endpoint. The affected versions...

Path traversal

Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk and if certain files exists on the tmp directory, via a Sensitive Data Exposure vulnerability in the /chart endpoint. The affected versions...

CVE-2021-26067: Exposure of Sensitive Information to an Unauthorized Actor

Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk and if certain files exists on the tmp directory, via a Sensitive Data Exposure vulnerability in the /chart endpoint. The affected versions...

PT-2021-16934

Name of the Vulnerable Software and Affected Versions Atlassian Bamboo versions prior to 7.2.2 Description The issue allows an unauthenticated remote attacker to view a stack trace, potentially revealing the path for the home directory in disk and the existence of certain files in the tmp...

Atlassian Bamboo information leakage vulnerability

Atlassian Bamboo is a Java-based server-side application for continuous integration builds from Atlassian Australia. A security vulnerability exists in Atlassian Bamboo versions prior to 7.2.2 that allows an unauthenticated, remote attacker to view a stack trace...