4949 matches found
CVE-2023-29412
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface...
Design/Logic Flaw
A CWE-78: Improper Handling of Case Sensitivity vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface...
CVE-2023-29412
CVE-2023-29412 is an OS command injection vulnerability in Schneider Electric’s APC Easy UPS Online Monitoring Software (Windows) that could allow remote code execution via the Java RMI interface. Affected products include APC Easy UPS Online Monitoring Software (versions up to 2.5-GA-01-22261) a...
Schneider Electric Easy UPS Online Monitoring Software 操作系统命令注入漏洞
Schneider Electric Easy UPS Online Monitoring Software is a power monitoring software from the French company Schneider Electric. The Schneider Electric Easy UPS Online Monitoring Software suffers from an operating system command injection vulnerability that stems from a mishandled case-sensitive...
CVE-2023-0983
creationtimestamp| type| source ---|---|--- 2023-04-10 18:35:57+00:00| seen| Telegram/T5eYmdZUrcXJPkqOnN76v8m-w12Scwp8UXjdNW6CDJ77MoE...
CollectionBatchBuyOperator.sol: tokenIds array is not shortened properly which makes execute function revert when not all NFTs are purchased successfully
Lines of code Vulnerability details Impact The CollectionBatchBuyOperator contract allows parties to buy NFTs through proposals. The proposal specifies an nftContract and token IDs via the nftTokenIdsMerkleRoot parameter that can be bought. Allowed executors can then execute the actual purchase b...
Vulnerabilities fixed in IBM QRadar SIEM
IBM fixed vulnerabilities in subcomponents of QRadar SIEM: Data Synchronization App, Use Case Manager app, QRadar Assistant app, Data Synchronization app and Wincollect agent. A malicious party can exploit the vulnerabilities to cause a denial-of-service, to gain access to sensitive data, or to...
Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID:CVE-2022-24434 DESCRIPTION: Node.js dicer module is vulnerable to a denial of service. By sending a specially-crafted form to server,...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2023-23477)
Summary IBM WebSphere Application Server is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2023-26283)
Summary IBM WebSphere Application Server is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...
An edge case in amplifier allows user to stake after end time, causing reward to be locked in the contract
Lines of code Vulnerability details Proof of Concept Observe that if nobody has staked after the period has ended, it's still possible for a single user to stake even though the period has ended. if firstStakeTime == 0 firstStakeTime = block.timestamp; else requireblock.timestamp if...
MuteBond is susceptible to DOS
Lines of code Vulnerability details Proof of Concept Observe that if timeToTokens is called with locktime = 1 week, amount 52, it will return 0. function timeToTokensuint256 amount, uint256 locktime internal pure returns uint256 uint256 weektime = 1 weeks; uint256 maxlock = 52 weeks;...
SourceCodester Police Crime Record Management System 跨站脚本漏洞
Police Crime Record Management System is a Police Crime Record Management System by Osman Yahaya Individual Developer. A security vulnerability exists in SourceCodester Police Crime Record Management System version 1.0 due to unknown code in the file /admin/casedetails.php of the component GET...
PT-2023-17251 · Sourcecodester · Sourcecodester Police Crime Record Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Police Crime Record Management System version 1.0 Description: A critical issue affects the GET Parameter Handler component in the /officer/assigncase.php file. The manipulation of the caseid argument leads to SQL injection,...
CVE-2023-1509
creationtimestamp| type| source ---|---|--- 2023-03-29 14:15:25+00:00| seen| https://t.me/cibsecurity/61001...
CVE-2023-0336
creationtimestamp| type| source ---|---|--- 2023-03-27 20:50:00+00:00| seen| https://t.me/cibsecurity/60803...
Earth Preta’s Cyberespionage Campaign Hits Over 200
We present a case study of the cyberespionage efforts by Earth Preta. This study on an active campaign delves into the structure, goals, and requirements of the organizations involved, and provides an opportunity to conduct wider intelligence analysis and insights in the development of effective...
CVE-2023-27871
creationtimestamp| type| source ---|---|--- 2023-03-21 17:35:02+00:00| seen| https://t.me/cibsecurity/60383 2025-02-25 20:23:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5374...
PT-2025-49648
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ALSA subsystem, specifically within the ca0132 driver. The tuning ctl set function may experience a buffer overrun when the loop does not break du...