scarvell

3 exploits Active since Dec 2016
CVE-2016-8655 NOMISEC HIGH WORKING POC
AF_PACKET chocobo_root Privilege Escalation
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.
CVSS 7.8
CVE-2022-4873 WRITEUP CRITICAL WRITEUP
Netcomm NF20/NF20MESH/NL1902 Firmware < r6b025 - Unauthenticated Stack-Based Buffer Overflow via SessionKey Parameter
On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.
CVSS 9.8
CVE-2022-4874 WRITEUP HIGH WRITEUP
Netcomm router models - Auth Bypass
Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc). If it exists, it performs a "fake login" to give the request an active session to load the file and not redirect to the login page.
CVSS 7.5