zx2c4 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

pass up to and including 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of t...

Zx2c4 Password-store

NA

The mem_write function in the Linux kernel prior to 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.

Linux Linux Kernel

2 EDB exploits25 Github repositories1 Article

NA

Race condition in the runScript function in Tunnelblick 3.3beta20 and previous versions allows local users to gain privileges by replacing a script file.

Google Tunnelblick

2 EDB exploits

NA

Multiple unspecified vulnerabilities in FreeBSD 6 prior to 6.4-STABLE, 6.3 prior to 6.3-RELEASE-p7, 6.4 prior to 6.4-RELEASE-p1, 7.0 prior to 7.0-RELEASE-p7, 7.1 prior to 7.1-RC2, and 7 prior to 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors relate...

Freebsd Freebsd 6.0 Freebsd Freebsd 6.3 Freebsd Freebsd 7.0 Freebsd Freebsd 7.1 Freebsd Freebsd 6.4

1 EDB exploit

10

CVSSv3

Local privilege escalation vulnerability in the Gentoo QEMU package prior to 2.5.0-r1.

Qemu Qemu

1 EDB exploit

NA

The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel prior to 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by...

Linux Linux Kernel 2.6.37 Linux Linux Kernel Suse Linux Enterprise Desktop 11 Suse Linux Enterprise Server 11 Opensuse Opensuse 11.2 Opensuse Opensuse 11.3 Suse Linux Enterprise Real Time Extension 11

2 EDB exploits

NA

Tunnelblick 3.3beta20 and previous versions relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to gain privileges via an execl system call.

Google Tunnelblick

2 EDB exploits

9.8

CVSSv3

A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code

Sparklabs Viscosity 1.4.1

2 EDB exploits

NA

Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.

Redhat Policykit 0.96

3 EDB exploits1 Github repository

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook