CVE-2024-0962

CVE-2024-0962 affects obgm libcoap 4.3.4. The vulnerability is in the function get_split_entry of src/coap_oscore.c (Configuration File Handler) and leads to a stack-based buffer overflow. The issue is exploitable remotely according to the description, and public disclosure of the exploit is note...

Music Gallery Site v1.0 - SQL Injection Vulnerability (3)

Exploit Title: Music Gallery Site v1.0 - SQL Injection on page Master.php Exploit Author: Muhammad Navaid Zafar Ansari CVE Assigned: CVE-2023-0962 mitre.org nvd.nist.org Vendor Homepage: https://www.sourcecodester.com Software Link: Music Gallery Site Version: v 1.0 Tested on: Windows 11 SQL...

Music Gallery Site v1.0 - SQL Injection on page Master.php

Exploit Title: Music Gallery Site v1.0 - SQL Injection on page Master.php Exploit Author: Muhammad Navaid Zafar Ansari Date: 21 February 2023 CVE Assigned: CVE-2023-0962 mitre.org nvd.nist.org Vendor Homepage: https://www.sourcecodester.com Software Link: Music Gallery Site Version: v 1.0 Tested...

CVE-2023-0962

creationtimestamp| type| source ---|---|--- 2023-02-23 00:52:10+00:00| seen| https://t.me/cibsecurity/58711 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51291...

CVE-2023-0962

The CVE-2023-0962 entry corresponds to a SQL injection in SourceCodester Music Gallery Site 1.0, occurring in Master.php under the GET Request Handler. The vulnerability arises from unsafely handling the id parameter, enabling remote exploitation. Exploitation is reported publicly (exploit-db ref...

SUSE CVE-2016-0962

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a deni...

CVE-2022-0962

Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0962

CVE-2022-0962 is a stored XSS vulnerability in ShowDoc prior to version 2.10.4, exploitable via uploading and rendering .webma files. The issue allows injected scripts to run in a user’s browser, potentially enabling session hijacking and data exposure as demonstrated by PoC payloads and multiple...

SUSE: Security Advisory (SUSE-SU-2017:0962-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0962

creationtimestamp| type| source ---|---|--- 2020-04-15 19:14:32+00:00| seen| https://t.me/cibsecurity/11271...

Information disclosure

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0962...

CVE-2020-0962

CVE-2020-0962 is a Windows win32k information-disclosure vulnerability. The connected sources describe an information-disclosure flaw in the win32k component that may reveal kernel information when a specially crafted application is run. The vulnerability affects the win32k kernel subsystem and i...

KB4550930: Windows 10 April 2020 Security Update

The remote Windows host is missing security update 4550930. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...

KB4550965: Windows 7 and Windows Server 2008 R2 April 2020 Security Update

The remote Windows host is missing security update 4550965 or cumulative update 4550964. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploit...

KB4550970: Windows 8.1 and Windows Server 2012 R2 April 2020 Security Update

The remote Windows host is missing security update 4550970 or cumulative update 4550961. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully...

CVE-2019-0962

CVE-2019-0962 affects Azure Automation: an elevation-of-privilege vulnerability in the RunAs account runbooks that can let members with the contributor role access Key Vault secrets via a RunAs account. The root cause is misconfigured RunAs role assignments that inadvertently expose Key Vault acc...

KLA11821 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Automation can be exploited remotely to gain privileges. 2. An elevation o...

Flash Player < 21.0.0.182 Multiple Vulnerabilities (APSB16-08)

Binary data 9176.prm...

Mageia: Security Advisory (MGASA-2016-0109)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory corruption

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a deni...