Chitor CMS SQL注入漏洞

Chitor CMS is a school management system by the individual developer Waqas Ahmad. Chitor CMS version prior to v1.1.2 suffers from a SQL injection vulnerability, which can be exploited by an attacker to perform SQL injection...

Splunk 安全漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze data and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

Zulip 授权问题漏洞

Zulip is a powerful open source group chat application from Zulip, Inc. for combining the immediacy of real-time chat with the productivity benefits of threaded conversations. An authorization issue vulnerability exists in Zulip 6.0 and prior versions, which stems from insufficient authorization...

TechView LA-5570 后置链接漏洞

The TechView LA-5570 is a wireless router. A security vulnerability exists in the TechView LA-5570 Wireless Gateway version 1.0.19T53, which originated from a vulnerability that allows an attacker to obtain sensitive information via /config/system.conf...

Freedesktop Poppler 缓冲区错误漏洞

Freedesktop Poppler is a Freedesktop community C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. A security vulnerability exists in Freedesktop Poppler version 0.75.0, which stems from a buffer overflow vulnerability in HtmlOutputDev::page...

ncurses 缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions that can be called by the user to generate a text-based user interface. A security vulnerability exists in ncurses version 6.1 due to a buffer overflow in the ncfindentry method of tinfo/comphash.c. The...

social-media-skeleton 安全漏洞

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer of fobybus. A security vulnerability exists in social-media-skeleton prior to version 1.0.5, which stems from validating password policies only on the client-side...

pandas injection vulnerability

pandas is an open source data analysis and processing tool based on the Python language. A security vulnerability exists in pandas-ai version v.0.9.1, which originates from arbitrary code execution via the isjailbreak function...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome on Android prior to version 116.0.5845.96, which stems from the presence of a post-release reuse vulnerability. An attacker can exploit the vulnerability to cause the program to...

Node.js path traversal vulnerability

Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js version 20 that stems from allowing an attacker to bypass the privilege model via path traversal using the API process.binding...

Microsoft Azure Security Vulnerabilities

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure HDInsights. An attacker exploited the vulnerability to perform spoofing attacks...

Microsoft Edge Security Breach

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge suffers from a security vulnerability that stems from a security feature bypass...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the camera middleware module, which may result in out-of-bounds writes...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips that stems from an incorrect boundary check in the power module, which may result in memory corruption...

social-media-skeleton SQL Injection Vulnerability

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer fobybus. A SQL injection vulnerability exists in social-media-skeleton, which stems from the presence of a UNION-based SQL injection vulnerability...

linux kernel security vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the linux kernel that stems from initializing the next fix iuid of a socket UID to currentfsuid...

Biltay Technology Scienta SQL注入漏洞

Biltay Technology Scienta is a mobile application from Biltay Technology designed for enterprise management. Biltay Technology Scienta suffers from a SQL injection vulnerability that stems from not properly neutralizing special elements. An attacker can exploit this vulnerability to inject...

RTX 路径遍历漏洞

RTX is RTXteam's prototype translation reasoning tool. A security vulnerability exists in the RTX TRAP v1.0 release. An attacker can perform a directory traversal attack by sending a specially crafted request to the /data/ endpoint...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of proper locking when an object performs an operation, which can be exploited by an attacker to...

Iagona ScrutisWeb 信任管理问题漏洞

Iagona ScrutisWeb is a security solution from the French company Iagona. A security vulnerability exists in Iagona ScrutisWeb version 2.1.37 and earlier versions. An attacker exploited the vulnerability to decrypt encrypted passwords into plaintext...