106 matches found
CRIME-poc
CRIME-poc CRIME 攻击：一种压缩预言攻击，由 Juliano Rizzo 和 Thai Duong 发现，编号为 CVE-2012-4929。 在压缩预言攻击中，对选定明文和未知明文的混合体使用自适应数据压缩，会导致压缩文本的长度发生内容敏感的变化，即使压缩文本本身随后被加密，这种变化也能被检测到。这可用于协议攻击，以检测注入的已知明文与消息秘密部分中的未知内容是否甚至部分相似，从而大大降低搜索秘密文本匹配项的复杂度。CRIME 和 BREACH 攻击就是利用这一现象的协议攻击示例。 CRIME...
ABB M2M Gateway Information Disclosure in embedded OpenSSL (CVE-2012-4929)
The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differenc...
CVE-2022-4929
A vulnerability was found in icplayer up to 0.818. It has been rated as problematic. Affected by this issue is some unknown functionality of the file addons/Commons/src/tts-utils.js. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 0.819 is...
CVE-2011-4929
Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors...
CVE-2025-4929
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-4929
creationtimestamp| type| source ---|---|--- 2025-05-19 11:44:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpjin6b6pym2 2025-05-19 13:13:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnkfbgr24...
CVE-2025-4929
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-4929 Campcodes Online Shopping Portal my-account.php sql injection
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-4929 Campcodes Online Shopping Portal my-account.php sql injection
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been...
Linux Distros Unpatched Vulnerability : CVE-2012-4929
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating th...
CVE-2024-4929 SourceCodester Simple Online Bidding System cross-site request forgery
A vulnerability classified as problematic has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file /simple-online-bidding-system/admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. It is possible to initiate the...
CVE-2024-4929 SourceCodester Simple Online Bidding System cross-site request forgery
A vulnerability classified as problematic has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file /simple-online-bidding-system/admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. It is possible to initiate the...
CVE-2024-4929
SourceCodester Simple Online Bidding System v1.0 has a cross-site request forgery (CSRF) vulnerability in admin/ajax.php?action=save_user. The flaw permits remote initiation and, per the CVE description, an exploit has been disclosed publicly. Multiple sources corroborate that the issue affects a...
SUSE SLES15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:4929-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4929-1 advisory. Firefox Extended Support Release 115.6.0 ESR changelog-entry bsc1217974 CVE-2023-6856: Heap-buffer-overflow affecting WebGL...
CVE-2023-4929
creationtimestamp| type| source ---|---|--- 2023-10-03 18:46:19+00:00| seen| https://t.me/cibsecurity/71510...
CVE-2023-4929
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices...
CVE-2023-4929
CVE-2023-4929 affects all firmware versions of the MOXA NPort 5000 Series due to improper validation of integrity checks during firmware updates/upgrades. This root cause — insufficient checks on firmware updates — could allow malicious modification of firmware and result in device takeover. The ...
CVE-2023-4929 NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices...
Debian: Security Advisory (DLA-400-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...