CVE-2019-2222
published 2019-12-06CVE-2019-2222: n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…
PriorityP339high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.58%
44.4th percentile
n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140322595
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2019-2222: Android Security Bulletin 2019-12-01
CVE: CVE-2019-2222
Severity: MEDIUM
Type: RCE
Affected AOSP versions: 10
References: A-140322595
vendor_android·2019-12-01·CVSS 7.8
CVE-2019-2222 [HIGH] CVE-2019-2222: Android Security Bulletin 2019-12-01
CVE: CVE-2019-2222
Severity: MEDIUM
Type: RCE
Affected AOSP versions: 10
References: A-140322595
Android Security Bulletin 2019-12-01
CVE: CVE-2019-2222
Severity: MEDIUM
Type: RCE
Affected AOSP versions: 10
References: A-140322595
GHSA
GHSA-c59r-gh79-pmcm: n ihevcd_parse_slice_data of ihevcd_parse_slice
ghsa_unreviewed·2022-05-24
CVE-2019-2222 [MEDIUM] GHSA-c59r-gh79-pmcm: n ihevcd_parse_slice_data of ihevcd_parse_slice
n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140322595
No detection rules found.
Exploit-DB
DirectAdmin 1.55 - 'CMD_ACCOUNT_ADMIN' Cross-Site Request Forgery
exploitdb·2019-03-08·CVSS 8.8
CVE-2019-9625 [HIGH] DirectAdmin 1.55 - 'CMD_ACCOUNT_ADMIN' Cross-Site Request Forgery
DirectAdmin 1.55 - 'CMD_ACCOUNT_ADMIN' Cross-Site Request Forgery
---
# Exploit title: DirectAdmin v1.55 - CSRF via CMD_ACCOUNT_ADMIN Admin Panel
# Date: 03/03/2019
# Exploit Author: ManhNho
# Vendor Homepage: https://www.directadmin.com/
# Software Link: https://www.directadmin.com/
# Demo Link: https://www.directadmin.com:2222/CMD_ACCOUNT_ADMIN
# Version: 1.55
# CVE: CVE-2019-9625
# Tested on: Windows 10 / Kali Linux
# Category: Webapps
#1. Description
DirectAdmin v 1.55 have CSRF via CMD_ACCOUNT_ADMIN Admin Panel lead to
create new admin account
#2. PoC
a) Send below crafted request to logged in user who is having admin
Administrator level access
history.pushState('', '', '/')
b) Once the logged in user opens the URL the form will get submitted
with active session
Exploit-DB
OpenSSH SCP Client - Write Arbitrary Files
exploitdb·2019-01-11·CVSS 6.8
CVE-2019-6111 [MEDIUM] OpenSSH SCP Client - Write Arbitrary Files
OpenSSH SCP Client - Write Arbitrary Files
---
'''
Title: SSHtranger Things
Author: Mark E. Haase
Homepage: https://www.hyperiongray.com
Date: 2019-01-17
CVE: CVE-2019-6111, CVE-2019-6110
Advisory: https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
Tested on: Ubuntu 18.04.1 LTS, OpenSSH client 7.6p1
We have nicknamed this "SSHtranger Things" because the bug is so old it could be
exploited by an 8-bit Demogorgon. Tested on Python 3.6.7 and requires `paramiko`
package.
The server listens on port 2222. It accepts any username and password, and it
generates a new host key every time you run it.
$ python3 sshtranger_things.py
Download a file using a vulnerable client. The local path must be a dot:
$ scp -P 2222 foo@localhost:test.txt .
The authenticity of host '[local
2019-12-06
Published