357 matches found
CVE-2022-23380
There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit...
CVE-2022-23380: Improper Neutralization of Special Elements used in an SQL Command
There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit...
PT-2022-15965
Name of the Vulnerable Software and Affected Versions taocms version 3.0.2 Description There is a SQL injection issue in the background of taocms, specifically in the parameter id within the endpoint "/action=admin&id=2&ctrl=edit". Recommendations For taocms version 3.0.2, avoid using the paramet...
PT-2022-15923
Name of the Vulnerable Software and Affected Versions taoCMS version 3.0.2 Description An issue in taoCMS allows for an arbitrary file read, enabling access to any files. This is achieved via the "admin.php" endpoint with specific parameters: action set to "file", ctrl set to "download", and path...
PT-2022-6414
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.3 Description The issue is related to the misinterpretation of the regulator get return value in the Linux kernel, specifically in the drivers/scsi/ufs/ufs-mediatek.c file. This misinterpretation can lead to...
Fix of CVE: CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069, CVE-2021-3984
CVE-2021-3974: fix using freed memory with regexp using a mark - CVE-2021-3984: fix illegal memory access when C-indenting - CVE-2021-3973: fix crash when using CTRL-W f without finding a file name - CVE-2021-4019: fix buffer overflow with long help argument - CVE-2021-4069: fix using freed...
CVE-2021-45014
There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26...
PT-2021-24188
Name of the Vulnerable Software and Affected Versions: taocms version 3.0.2 Description: The issue is related to an upload SQL injection vulnerability in the background of taocms. This vulnerability is specifically found in the parameter id within the endpoint "/action=cms&ctrl=update&id=26"...
CVE-2021-45014: Improper Neutralization of Special Elements used in an SQL Command
There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26...
Linux kernel 安全漏洞
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory overwrite vulnerability exists in aspeedlpcctrlmmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in Linux kernel...
PT-2021-29513
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.12 Description The issue is related to an information leak in the hid submit ctrl function of the usbhid module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-29434
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.45 Description The issue is related to an information leak in the hid submit ctrl function of the usbhid module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-25380
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.127 Description: The issue is related to an information leak in the hid submit ctrl function of the usbhid module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2021-29374
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.127 Description The issue is related to an information leak in the hid submit ctrl function of the usbhid module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-25440
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.45 Description: The issue is related to an information leak in the hid submit ctrl function of the usbhid module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2021-25519
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.12 Description: The issue is related to an information leak in the hid submit ctrl function of the usbhid module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2021-13182
Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: A memory corruption issue exists due to a use after free in the wpas ctrl msg queue timeout function of ctrl iface unix.c. This could lead to local escalation of privilege, requiring System execution...
FalconEye - Real-time detection software for Windows process injections
FalconEye is a windows endpoint detection software for real-time process injections. It is a kernel-mode driver that aims to catch process injections as they are happening real-time. Since FalconEye runs in kernel mode, it provides a stronger and reliable defense against process injection...
PT-2021-24981
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.40 Description: A memory leak issue was discovered in the nvmet alloc ctrl function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2021-28975
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.40 Description A memory leak issue was discovered in the nvmet alloc ctrl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...