16436 matches found
Foxit PDF Reader Memory Misreference Vulnerability (CNVD-2024-33843)
Foxit PDF Reader is China Foxit Foxit company a PDF reader. A memory misreference vulnerability exists in Foxit PDF Reader, which can be exploited by an attacker to execute arbitrary code...
SeaCMS 安全漏洞
SeaCMS is an open source content management system based on PHP+MySql technology. A security vulnerability exists in the SeaCMS adminweixin.php processing parameter, which can be exploited by an authenticated remote attacker to submit a special request that can be used to execute arbitrary comman...
Malicious code in sap-before (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e69ecc097b76eba1972249f32c908d6b1bb8f988ec091db41d021568410b6c6e The OpenSSF Package Analysis project identified 'sap-before' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in sap-always (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b6d3b5acd9b98712bf1b1c0babd85de045245395e42d961a8cfd6f3fab49662 The OpenSSF Package Analysis project identified 'sap-always' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in sap-addnew (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12f8c238be86b6eda197ccf055ce731f7f59ebb9506f2333979fb21e18f5072a The OpenSSF Package Analysis project identified 'sap-addnew' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
php:php-fuzz-execute: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=4924433093951488 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerubsanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5af618000000 Crash State: NULL Sanitizer: undefined UBSAN Recommended...
GLPI Security Vulnerabilities
GLPI is an open source IT and asset management software from an individual developer. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and i...
CVE-2024-39069
An issue in ifood Order Manager v3.35.5 'Gestor de Peddios.exe' allows attackers to execute arbitrary code via a DLL hijacking attack...
Exploit for Protection Mechanism Failure in Artifex Ghostscript
PoC exploit for CVE-2024-29510, a Ghostscript format string vuln...
CVE-2024-5974
A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3...
CVE-2024-38959
The Creativeitem Academy LMS Learning Management System version v.6.8.1 is affected by a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit this flaw by targeting a string parameter to execute arbitrary code and access sensitive information. No specific remediation steps or e...
SQL Injection
vanna-ai/vanna is vulnerable to SQL injection. The vulnerability is due to an exposed SQL query pgreadfile, which allows remote users to read arbitrary local files on the victim server, including sensitive files such as /etc/passwd. Note that this vulnerability is only exploitable due to an...
CVE-2024-39028
An issue was discovered in SeaCMS =12.9 which allows remote attackers to execute arbitrary code via adminping.php...
Malicious code in compiler-wasm-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c3e3404f77486c9124e70890333cce19382125d07dac40b2ed4b87a466c855e The OpenSSF Package Analysis project identified 'compiler-wasm-lib' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
Jungo WinDriver Privilege Management Error Vulnerability
Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. A privilege management error vulnerability exist...
Jungo WinDriver Privilege Management Error Vulnerability (CNVD-2024-34416)
Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. A privilege management error vulnerability exist...
CVE-2024-2385
The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.3.7 via several of the plugin's widgets through the 'style' attribute. This makes it possible for authenticated attackers, with contributor-level access and above, t...
AlmaLinux 8 : libreoffice (ALSA-2024:4242)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:4242 advisory. libreoffice: create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic CVE-2024-3044 Tenable has extracted the...
AZL-43110 CVE-2023-24531 affecting package golang for versions less than 1.21.0-1
Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can cause various bad bahaviors, including executing arbitrary commands or inserting new environment variables. This issue is...