This Metasploit module exploits a vulnerability in a statement in the system programming guide of the Intel 64 and IA-32 architectures software developer’s manual being mishandled in various operating system…
>> CATEGORY: exploit
Linux/Ubuntu suffers from a vulnerability where other users’ coredumps can be read via a setgid directory and killpriv bypass.
QNAP Qcenter Virtual Appliance versions 1.6.1056 (20170825) and 1.6.1075 (20171123) suffer from information disclosure and command injection vulnerabilities.
Chrome V8 suffers from a bug in KeyAccumulator that can cause a crash.
Microsoft Edge Chakra JIT suffers from multiple out of bounds reads and writes.
Dicoogle PACS version 2.5.0 suffers from a directory traversal vulnerability.
Linux kernels prior to version 4.13.9 (Ubuntu 16.04/Fedora 27) local privilege escalation exploit.
Microsoft Edge Chakra JIT suffers from a bug. BoundFunction::NewInstance is used to handle calls to a bound function. The method first allocates a new argument array and copies the prepended…
Microsoft Edge Chakra JIT suffers from a type confusion vulnerability with hoisted SetConcatStrMultiItemBE instructions.
phpMyAdmin v4.8.0 and v4.8.1 are vulnerable to local file inclusion, which can be exploited post-authentication to execute PHP code by application. The module has been tested with phpMyAdmin v4.8.1.