9782 matches found
kernel: x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction
A compatibility issue was found between Linux and Hyper-V when Indirect Branch Tracking IBT is enabled. The Hyper-V hypercall page lacks the required ENDBR64 instruction, causing all hypercalls to fail with an exception and panic the guest...
Windows Hyper-V Denial of Service Vulnerability
...
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
...
CVE-2024-43633: Sensitive Data Storage in Improperly Locked Memory
Windows Hyper-V Denial of Service Vulnerability...
PT-2024-8158
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to the storage of confidential data in incorrectly locked memory, which can be exploited to cause a denial of service. This allows attackers to affect the syste...
Microsoft Hyper-V security vulnerabilities
Microsoft Windows Hyper-V is a virtualization technology developed by Microsoft for creating and managing virtual machines on the Windows operating system, of which the Shared Virtual Disk is one. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V Shared Virtual Disk, whi...
PT-2024-8086
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V Shared Virtual Disk affected versions not specified Description: The issue is related to the Windows Hyper-V Shared Virtual Disk and involves the dereferencing of an untrusted pointer. This can allow an attacker to elevate the...
Microsoft Hyper-V security vulnerabilities
Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A denial of service vulnerability exists in Microsoft Windows Hyper-V. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2024-43624: Untrusted Pointer Dereference
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability...
CVE-2024-51093
Stored Cross-Site Scripting XSS vulnerability in Snipe-IT - v7.0.13 allows an attacker to upload a malicious XML file containing JavaScript code. This can lead to privilege escalation when the payload is executed, granting the attacker super admin permissions within the Snipe-IT system...
PT-2024-36849
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Hyper-V HID driver in the Linux kernel. When unloading the 'hid hyperv' module, a devres complaint occurs due to the corresponding devres group not being...
x86/hyperv: fix kexec crash due to VP assist page corruption
...
Metasploit Wrap-Up: 11/08/2024
RISC-V Support This release of Metasploit Framework has added exciting new features such as new payloads that target the RISC-V architecture. These payloads allow for the execution of commands on compromised hardware, allowing Metasploit Framework and Metasploit Payloads to be used in more...
Linux hv_netvsc DoS
The vulnerability of the hvnetvsc component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
USN-7089-3: Linux kernel vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...
USN-7089-2 linux-azure, linux-gcp, linux-ibm vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...
RHEL 6 : qemu-kvm-rhev (RHSA-2014:0434)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0434 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provid...
Linux Execute Command
Execute an arbitrary command Module Options msf use payload/linux/riscv32le/exec msf payloadexec show actions ...actions... msf payloadexec set ACTION msf payloadexec show options ...show and set options... msf payloadexec run This module requires Metasploit: https://metasploit.com/download Curre...
Linux Execute Command
Execute an arbitrary command Module Options msf use payload/linux/riscv64le/exec msf payloadexec show actions ...actions... msf payloadexec set ACTION msf payloadexec show options ...show and set options... msf payloadexec run This module requires Metasploit: https://metasploit.com/download Curre...
Simple
Simple NOP generator Module Options msf use nop/riscv64le/simple msf nopsimple show actions ...actions... msf nopsimple set ACTION msf nopsimple show options ...show and set options... msf nopsimple run This module requires Metasploit: https://metasploit.com/download Current source:...