PT-2021-28610

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue concerns the use of a local variable for calculating the final log size in the EFI TPM module. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-24779

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue concerns access to a variable DT array in the sx9310 driver. It was introduced in version v5.11 and fixed in version v5.12.4. The actual impact and attack plausibility have not yet...

PT-2021-24539

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.3 through v5.12.3 Description: The issue concerns the use of a local variable for calculating the final log size in the EFI TPM module. The actual impact and attack plausibility have not yet been proven...

PT-2021-24647

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue concerns the use of a local variable for calculating the final log size in the EFI TPM module. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-28533

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.12.3 Description The issue concerns the use of a local variable for calculating the final log size in the EFI TPM module. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-28773

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue concerns access to a variable DT array in the sx9310 driver. It was introduced in version v5.11 and fixed in version v5.12.4. The actual impact and attack plausibility have not yet...

stir to self

Handle gpersoon Vulnerability details Impact The function stir of Cauldron.sol can be manipulated when from == to. In that case the balance of "to" is increased while the balance of "from" isn't decreased. This is due to the fact that a temporary variable is used and the balance of "to" overwrite...

OS Command Injection in falconchristmas/fpp

✍️ Description The version variable is directly embeded in a OS command in https://github.com/FalconChristmas/fpp/blob/123cdf2eb11062766da333a7a4d85bc0bf620e47/www/upgradefpp.phpL54 php $version = $GET'version'; // $command = "sudo /opt/fpp/scripts/upgradeFPP " . $version . " 2&1"; echo "Command:...

slopShell - The Only Php Webshell You Need

php webshell Since I derped, and forgot to talk about usage. Here goes. For this shell to work, you need 2 things, a victim that allows php file uploadyourself, in an educational environment and a way to send http requests to this webshell. Basic Usage VideoHosted on Youtube: Current VT Detection...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_check_variable

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6731954419531776 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Node.js: Node Installer Local Privilege Escalation

Node is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an attacker to perform two different escalation attacks: PATH and DLL hijacking. To demonstrate thi...

CVE-2021-20178

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...

DEBIAN-CVE-2021-20178

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

PYSEC-2021-106

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...

Design/Logic Flaw

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

UBUNTU-CVE-2021-20178

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...