MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in MediaTek that stems from a lack of boundary checking in gps, where out-of-bounds writes may occur, which may result in local privilege escalation, affecting the following products an...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in MediaTek that originates from a possible out-of-bounds write in keyinstall due to an integer overflow, which could result in a local privilege escalation affecting the following...

Sql injection

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch...

CVE-2014-125037 License to Kill injury.rb sql injection

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch...

CVE-2014-125037

CVE-2014-125037 affects the License to Kill project, specifically the models/injury.rb component. The issue arises from manipulation of the name argument, resulting in an SQL injection vulnerability. A patch identified as cd11cf174f361c98e9b1b4c281aa7b77f46b5078 is available, with recommendations...

CVE-2014-125037

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch...

CVE-2014-125037: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch...

CVE-2022-34323

Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript code in the context of other users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Filters and Display model...

CVE-2022-34323

Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript code in the context of other users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Filters and Display model...

PT-2023-13358 · Sage · Sage Xrt Business Exchange

Name of the Vulnerable Software and Affected Versions: Sage XRT Business Exchange version 12.4.302 Description: Multiple XSS issues were discovered in Sage XRT Business Exchange that allow an attacker to execute JavaScript code in the context of other users' browsers. The attacker needs to be...

PT-2022-28121 · NetGear · Netgear R6400V2 +8

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX40 versions prior to 1.0.2.60 NETGEAR RAX35 versions prior to 1.0.2.60 NETGEAR R6400v2 versions prior to 1.0.4.122 NETGEAR R6700v3 versions prior to 1.0.4.122 NETGEAR R6900P versions prior to 1.3.3.152 NETGEAR R7000P versions prior...

CVE-2021-4270: Improper Neutralization

A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The name of the...

Imprint CMS 跨站脚本漏洞

Imprint CMS is a publisher-oriented, domain-specific CMS based on ASP.net MVC 4 and LinqToSQL by Peder Skou, an individual developer. A security vulnerability exists in Imprint CMS, which originates in the SearchForm function of the file ImprintCMS/Models/ViewHelpers.cs, where the operation of a...

CVE-2020-36617

A vulnerability was found in ewxrjk sftpserver. It has been declared as problematic. Affected by this vulnerability is the function sftpparsepath of the file parse.c. The manipulation leads to uninitialized pointer. The real existence of this vulnerability is still doubted at the moment. The name...

Design/Logic Flaw

A vulnerability was found in ewxrjk sftpserver. It has been declared as problematic. Affected by this vulnerability is the function sftpparsepath of the file parse.c. The manipulation leads to uninitialized pointer. The real existence of this vulnerability is still doubted at the moment. The name...

CVE-2020-36617 ewxrjk sftpserver parse.c sftp_parse_path uninitialized pointer

A vulnerability was found in ewxrjk sftpserver. It has been declared as problematic. Affected by this vulnerability is the function sftpparsepath of the file parse.c. The manipulation leads to uninitialized pointer. The real existence of this vulnerability is still doubted at the moment. The name...

Ransomware Business Models: Future Pivots and Trends

Ransomware groups and their business models are expected to change from what and how we know it to date. In this blog entry, we summarize from some of our insights the triggers that spark the small changes in the short term “evolutions” and the bigger deviations “revolutions” they can redirect...

CVE-2022-44636

The Samsung TV 2021 and 2022 model smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models...

CVE-2022-44636

CVE-2022-44636 affects Samsung TV models from 2021 and 2022, where the smart remote control can enable microphone access via Bluetooth spoofing when a user activates the remote by pressing a button. The vulnerability is mitigated in 2021 models by updates to versions xxx72510 or E9172511, and in ...

PT-2022-27273

Name of the Vulnerable Software and Affected Versions Samsung TV 2021 models Samsung TV 2022 models Description The smart remote control allows attackers to enable microphone access through Bluetooth spoofing. This occurs when a user activates the remote control by pressing a button...