patch-diffing-in-the-dark

黑暗中的补丁比对 一个利用CVE分析与补丁比对来发现新漏洞的系列博客文章。 正如博客文章所示，4个CVE均源自对CVE-2021-1657的深入研究。 目录 CVE-2021-1657的成果： 第1部分 - 黑暗中的补丁比对 第2部分 - 坠入兔子洞 第3部分 - 倒下但未出局 第4部分 - 你信任我吗？ CVE-2020-1030的成果（额外研究）： 补丁比对：又一个Spooler漏洞 发现又一个Spooler漏洞 CVE映射...

Important Photon OS Security Update - PHSA-2026-4.0-1030

Updates of 'linux' packages of Photon OS have been released...

CVE-2025-1030

creationtimestamp| type| source ---|---|--- 2025-12-18 17:39:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabptbf2cs2q...

CVE-2021-1030

In setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges...

CVE-2012-1030

Cross-site scripting XSS vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted URL containing text that is used within a modal popup...

CVE-2023-1030

A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un lead...

Linux Distros Unpatched Vulnerability : CVE-2015-1030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory leak in the rfc2553connectto function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service memory consumption via ...

Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2025-1030)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-29562 · Ibm · Ibm Powervm Hypervisor

Name of the Vulnerable Software and Affected Versions: IBM PowerVM Hypervisor versions FW950.00 through FW950.90 IBM PowerVM Hypervisor versions FW1030.00 through FW1030.60 IBM PowerVM Hypervisor versions FW1050.00 through FW1050.20 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.10...

PT-2024-7403 · Ibm · Ibm Flexible Service Processor

Name of the Vulnerable Software and Affected Versions: IBM Flexible Service Processor FSP versions FW860.00 through FW860.B3 IBM Flexible Service Processor FSP versions FW950.00 through FW950.C0 IBM Flexible Service Processor FSP versions FW1030.00 through FW1030.61 IBM Flexible Service Processor...

PT-2024-12444 · Ibm · Ibm Powervm Hypervisor

Name of the Vulnerable Software and Affected Versions: IBM PowerVM Hypervisor versions FW950.00 through FW950.90 IBM PowerVM Hypervisor versions FW1020.00 through FW1020.40 IBM PowerVM Hypervisor versions FW1030.00 through FW1030.30 Description: The issue could reveal sensitive partition data to ...

CVE-2024-1030

creationtimestamp| type| source ---|---|--- 2024-01-30 11:21:28+00:00| seen| https://t.me/ctinow/175841 2024-02-21 15:11:51+00:00| seen| https://t.me/ctinow/189648...

CVE-2024-1030

Cogites eReserv 7.7.58 is affected by a cross-site scripting vulnerability in the unknown portion of /front/admin/tenancyDetail.php, triggered by manipulating the id parameter. Exploitation appears remote and is supported by multiple sources in connected documents (e.g., Red Hat/CVE entries and P...

CVE-2024-1030 Cogites eReserv tenancyDetail.php cross site scripting

A vulnerability was found in Cogites eReserv 7.7.58. It has been classified as problematic. This affects an unknown part of the file /front/admin/tenancyDetail.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The associated...

CVE-2024-1030 Cogites eReserv tenancyDetail.php cross site scripting

A vulnerability was found in Cogites eReserv 7.7.58. It has been classified as problematic. This affects an unknown part of the file /front/admin/tenancyDetail.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The associated...

PT-2023-20242 · Ibm · Ibm Powervm Hypervisor

Name of the Vulnerable Software and Affected Versions: IBM PowerVM Hypervisor versions FW950.00 through FW950.71 IBM PowerVM Hypervisor versions FW1010.00 through FW1010.40 IBM PowerVM Hypervisor versions FW1020.00 through FW1020.20 IBM PowerVM Hypervisor versions FW1030.00 through FW1030.11...

CVE-2023-1030

creationtimestamp| type| source ---|---|--- 2023-02-24 22:19:25+00:00| seen| https://t.me/cibsecurity/58891 2025-04-03 08:34:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10190...

CVE-2023-1030

SourceCodester code-projects Online Boat Reservation System 1.0 is affected by CVE-2023-1030 due to a flaw in the POST Parameter Handler: the un parameter to /boat/login.php can be manipulated to trigger cross-site scripting. The vulnerability is exploitable remotely, and public exploits or detai...

CVE-2017-1030

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

Backdoor.Win32.Bushtrommel.122 MVID-2022-0630 Remote Command Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/76c09bc82984c7f7ef55eb13018e0d87B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Bushtrommel.122 Vulnerability: Unauthenticated Remote Command Execution...