CVE HUB 👾
787 subscribers
19.3K links
Github Red team resource push
Github 红队资源推送
Cve/Rce/Exploit/Redteam/漏洞利用/红队

Channel push 24/7 (real time)
频道全天候推送(实时)
Download Telegram
👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-29455
Github: https://github.com/akhilkoradiya/CVE-2022-29455
Describe:
DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.
👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-2639
Github: https://github.com/veritas501/CVE-2022-2639-PipeVersion
Describe:
An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.
👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-20186
Github: https://github.com/s1204-inspect/CVE-2022-20186_CTXZ
Describe:
In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-215001024References: N/A