Aggregator

CVE-2022-35020 | Advancecomp 2.3 sanitizer_common_interceptors.inc __interceptor_memcpy heap-based overflow (Nessus ID 211214)

Vuldb Updates
1 year 7 months ago
A vulnerability, which was classified as critical, has been found in Advancecomp 2.3. This issue affects the function __interceptor_memcpy of the file /sanitizer_common/sanitizer_common_interceptors.inc. The manipulation leads to heap-based buffer overflow. The identification of this vulnerability is CVE-2022-35020. The attack may be initiated remotely. There is no exploit available.
vuldb.com

CVE-2024-4030 | CPython up to 3.12.3/3.13.0a1 mkdtemp temp file (ID 118486 / Nessus ID 211212)

Vuldb Updates
1 year 7 months ago
A vulnerability was found in CPython up to 3.12.3/3.13.0a1. It has been declared as critical. Affected by this vulnerability is the function mkdtemp. The manipulation leads to creation of temporary file in directory with insecure permissions. This vulnerability is known as CVE-2024-4030. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2003-0620 | Colin Watson man-db 2.3.x/2.4.x ult_src memory corruption (EDB-22971 / Nessus ID 15201)

Vuldb Updates
1 year 7 months ago
A vulnerability, which was classified as critical, has been found in Colin Watson man-db 2.3.x/2.4.x. This issue affects the function ult_src. The manipulation with the input -M leads to memory corruption. The identification of this vulnerability is CVE-2003-0620. Access to the local network is required for this attack to succeed. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-48962 | Apache OFBiz up to 18.12.16 URL Parameter code injection

VulDB Recent Entries
1 year 7 months ago
A vulnerability has been found in Apache OFBiz up to 18.12.16 and classified as critical. This vulnerability affects unknown code of the component URL Parameter Handler. The manipulation leads to code injection. This vulnerability was named CVE-2024-48962. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-41151 | Apache HertzBeat up to 1.6.0 Notice Template deserialization

VulDB Recent Entries
1 year 7 months ago
A vulnerability, which was classified as critical, was found in Apache HertzBeat up to 1.6.0. This affects an unknown part of the component Notice Template Handler. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2024-41151. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-47208 | Apache OFBiz up to 18.12.16 Groovy Expression server-side request forgery

VulDB Recent Entries
1 year 7 months ago
A vulnerability classified as critical was found in Apache OFBiz up to 18.12.16. Affected by this vulnerability is an unknown functionality of the component Groovy Expression Handler. The manipulation leads to server-side request forgery. This vulnerability is known as CVE-2024-47208. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-45791 | Apache Hertzbeat up to 1.6.0 Query String information disclosure

VulDB Recent Entries
1 year 7 months ago
A vulnerability classified as problematic has been found in Apache Hertzbeat up to 1.6.0. Affected is an unknown function of the component Query String Handler. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2024-45791. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

DEF CON 32 – Sudos And Sudon’ts: Peering Inside Sudo For Windows

Security Boulevard
1 year 7 months ago

Authors/Presenters: Michael Torres

Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – Sudos And Sudon’ts: Peering Inside Sudo For Windows appeared first on Security Boulevard.

Marc Handelman

Managed ad