OSGi v3.8-3.18 Console - RCE

!/usr/bin/python Exploit Title: OSGi v3.8-3.18 Console RCE Date: 2023-07-28 Exploit Author: Andrzej Olchawa, Milenko Starcik, VisionSpace Technologies GmbH Exploit Repository: https://github.com/visionspacetec/offsec-osgi-exploits.git Vendor Homepage: https://eclipse.dev/equinox Software Link:...

CVE-2023-5313 phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

phpkobo Ajax Poll Script Competition Condition Issue Vulnerability

phpkobo Ajax Poll Script is a free Ajax script from phpkobo. A Competitive Conditions Issue vulnerability exists in phpkobo Ajax Poll Script version 3.18. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

PT-2023-32033 · Unknown · Phpkobo Ajax Poll Script

Name of the Vulnerable Software and Affected Versions: phpkobo Ajax Poll Script version 3.18 Description: A problematic vulnerability was found in the phpkobo Ajax Poll Script, affecting an unknown functionality of the file ajax-poll.php of the component Poll Handler. This vulnerability leads to...

K23030550: Linux kernel vulnerability CVE-2016-8399

Security Advisory Description An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged proce...

SUSE CVE-2017-12762

In /drivers/isdn/i4l/isdnnet.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux kernel 4.9-stable tree, 4.12-stable tree, 3.18-stable tree, and 4.4-stable tree...

org.apache.camel.quarkus:camel-quarkus-integration-test-ldap (>=2.8.0 <=2.13.2), org.apache.camel.quarkus:camel-quarkus-ldap (>=2.8.0 <=2.13.2) +2 more potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (>=3.15.0 <=3.18.3)

org.apache.camel:camel-ldap MAVEN version =3.15.0, =2.8.0, =2.8.0, =2.8.0, =3.15.0, =3.18.3 Source cves: CVE-2022-45046 Source advisory: OSV:GHSA-W66J-XC7R-M2JV...

CVE-2022-1941

A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of...

CVE-2022-1941

CVE-2022-1941 affects Protocol Buffers parsing for protobuf-cpp and protobuf-python, causing out-of-memory and DoS on parsing malformed MessageSet inputs. Affected versions include protobuf-cpp up to 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1, 3.21.5 and protobuf-python up to 4.21.5, with 3.16/3.17 n...

GSD-2022-1006224 pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map

pinctrl: nomadik: Fix refcount leak in nmkpinctrldtsubnodetomap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

cortex-cli (=2.0.7) potentially affected by CVE-2022-36083 via jose-node-cjs-runtime (=3.18.0)

jose-node-cjs-runtime NPM version =3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on jose-node-cjs-runtime and may be impacted: - cortex-cli =2.0.7 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

PT-2022-33578 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.18 through 5.19.1 Description: The issue is related to a refcount leak in the omap3xxx prm late init function. This problem was introduced in version v3.18 and is fixed in Linux Kernel version v5.19.2. The actual impac...

CVE-2018-7889

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call...

PT-2022-15775 · Nginx · Nginx Controller Api Management

Name of the Vulnerable Software and Affected Versions: NGINX Controller API Management versions 3.18.0 through 3.19.0 Description: An authenticated attacker with access to the user or admin role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is...

CVE-2021-45460

A vulnerability has been identified in SICAM PQ Analyzer All versions V3.18. A service is started by an unquoted registry entry. As there are spaces in this path, attackers with write privilege to those directories might be able to plant executables that will run in place of the legitimate proces...

Exploit for Use After Free in Google Android

CVE-2019-2215 CVE-2019-2215 POC for kernel 3.18 Based on Madd...

PT-2020-9930 · Eclipse · Eclipse Web Tools Platform

Name of the Vulnerable Software and Affected Versions: Eclipse Web Tools Platform versions prior to 3.18 2020-06 Description: The issue allows XML and DTD files referring to external entities to be exploited, sending the contents of local files to a remote server when edited or validated. This ca...

CVE-2019-17269

Intellian Remote Access 3.18 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the Ping Test field...

CVE-2019-17269

Intellian Remote Access 3.18 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the Ping Test field...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to 1 hijack the authentication of administrators for requests that create a user via a request to...