814 matches found
PT-2021-20896
Name of the Vulnerable Software and Affected Versions: tsMuxer version 2.6.16 Description: A heap-based buffer overflow was discovered in tsMuxer via the function HevcSpsUnit::short term ref pic setint in hevc.cpp. This issue can be exploited, but no details are provided about the estimated numbe...
UVI-2021-1001893 netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value
netfilter: xtIDLETIMER: fix panic that occurs when timertype has garbage value This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commi...
Wordpress 4.9.6 - Arbitrary File Deletion (Authenticated) Exploit
Exploit Title: Wordpress 4.9.6 - Arbitrary File Deletion Authenticated 2 Exploit Author: samguy Vulnerability Discovery By: Slavco Mihajloski & Karim El Ouerghemmi Vendor Homepage: https://wordpress.org Software Link: https://wordpress.org/wordpress-4.9.6.tar.gz Version: 4.9.6 Tested on: Linux -...
PT-2021-27866
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of specific...
ref-ag.ch Cross Site Scripting vulnerability OBB-2155115
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the ecma-bytecode-ref function in the ecma-helpers.c component of the JavaScript engine for IoT JerryScript and the IoT.js platform, related to memory usage after deallocation, allows a attacker to trigger a service failure.
The vulnerability of the ecmabytecoderef function in the ecma-helpers.c component of the JavaScript engine for IoT JerryScript and the IoT.js platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Exploit for Cross-site Scripting in Gitea
CVE-2021-28378 Details about this CVE herehttps://www.cved...
GSD-2021-1000995 can: j1939: fix Use-after-Free, hold skb ref while in use
can: j1939: fix Use-after-Free, hold skb ref while in use This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...
UVI-2021-1000995 can: j1939: fix Use-after-Free, hold skb ref while in use
can: j1939: fix Use-after-Free, hold skb ref while in use This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...
CVE-2021-20105
Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...
CVE-2021-20105
Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...
CVE-2021-20105: URL Redirection to Untrusted Site
Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...
Machform 输入验证错误漏洞
MachForm is an HTML form builder that lets you create contact forms, surveys, order forms or any other web form without writing code. An open redirect vulnerability exists in Safariinit.php in versions prior to Machform 16. The vulnerability stems from improper validation of the ref parameter. An...
PT-2021-3482
Name of the Vulnerable Software and Affected Versions Machform versions prior to 16 Description The issue is related to an open redirect vulnerability in the Safari init.php file of the Machform form creation editor. This vulnerability is caused by the improper sanitization of the ref parameter...
GSD-2021-1000820 btrfs: abort in rename_exchange if we fail to insert the second ref
btrfs: abort in renameexchange if we fail to insert the second ref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...
UVI-2021-1000784 btrfs: abort in rename_exchange if we fail to insert the second ref
btrfs: abort in renameexchange if we fail to insert the second ref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.43 by commit...
UBUNTU-CVE-2020-23302
There is a heap-use-after-free at ecma-helpers-string.c:772 in ecmarefecmastring in JerryScript 2.2.0...
CVE-2021-33562
A reflected cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL...
CVE-2021-33562
A reflected cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL...
Shopizer 2.16.0 - (Multiple) Cross-Site Scripting Vulnerability
Exploit Title: Shopizer 2.16.0 - 'Multiple' Cross-Site Scripting XSS Exploit Author: Marek Toth Vendor Homepage: https://www.shopizer.com Software Link: https://github.com/shopizer-ecommerce/shopizer Version: alert1 and save it 4. Open "Customers" - XSS payload will trigger Reflected XSS - 'ref'...