2812 matches found
Fpicker - A Frida-based Fuzzing Suite Supporting Various Modes (Including AFL++ In-Process Fuzzing)
fpicker is a Frida-based fuzzing suite that offers a variety of fuzzing modes for in-process fuzzing, such as an AFL++ mode or a passive tracing mode. It should run on all platforms that are supported by Frida. Installation Instructions Building and Running Creating a Fuzzing Harness Modes and...
COVID-19 Contact Tracing System With QR Code Scanning 1.0 SQL Injection Exploit
COVID-19 Contact Tracing System web app with QR Code Scanning version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: Covid-19 Contact Tracing System Web App with QR Code Scanning CTS-QR by: oretnom23 v1.0 remote...
Covid-19 Contact Tracing System Web App with QR Code Scanning - SQL-Injection-Bypass-Authentication
The Covid-19 Contact Tracing System Web App with QR Code Scanning is vulnerable in the application /ctsqr/classes/Login.php from SQL-Injection-Bypass-Authentication m0re info: . The parameter username from the login form is not protected correctly and there is no security and escaping from...
honeycomb-tracing (=0.0.1) potentially affected by CVE-2020-36207 via aovec (=1.1.0)
aovec CARGO version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aovec and may be impacted: - honeycomb-tracing =0.0.1 Source cves: CVE-2020-36207 Source advisory: OSV:GHSA-G489-XRW3-3V8W...
38M Records Exposed Online—Including Contact-Tracing Info
Misconfigured Power Apps from Microsoft led to more than a thousand web apps accessible to anyone who found them...
OESA-2021-1318 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users with CAPSYSADMIN capability cou...
The vulnerability of the Windows Event Tracing service allows attackers to exploit their privileges.
The vulnerability of the Windows Event Tracing service in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Windows Event Tracing service allows attackers to exploit their privileges.
The vulnerability of the Windows Event Tracing service in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
COVID-19 Contact-Tracing Data Exposed, Fake Vax Cards Circulate
This week, the Indiana Department of Health issued a notice that the state’s COVID-19 contact-tracing system had been exposed via a cloud misconfiguration, revealing names, emails, gender, ethnicity, race and dates of birth of more than 750,000 people. The incident shows that COVID-19 data could ...
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.
...
CVE-2021-34486
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-34486
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-34487
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-34487
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-26425
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-26425
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-26425
Windows Event Tracing Elevation of Privilege Vulnerability...
Privilege escalation
Windows Event Tracing Elevation of Privilege Vulnerability...