252 matches found
The Voynich Codex Decoded: Statistical Symbolism and Scroll-Wide Logic
This paper introduces a structured decoding framework for the Voynich Manuscript, based on mathematical rhythm, symbolic transformation, and glyph-level recursion. Rather than interpret symbols phonetically, this method decodes them by structural roles and spatial pacing. Using scroll-wide...
WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Lam Que Chi Patchstack Alliance in WordPress Plugin WP Mailster versions = 1.8.16.0...
CVE-2024-46785
In the Linux kernel, the following vulnerability has been resolved: eventfs: Use listdelrcu for SRCU protected list variable Chi Zhiling reported: We found a null pointer accessing in tracefs1, the reason is that the variable 'eichild' is set to LISTPOISON1, that means the list was removed in...
CVE-2024-46785
CVE-2024-46785 affects the Linux kernel, specifically an issue in eventfs relating to SRCU-protected lists. The root cause is a NULL pointer access in tracefs when ei_child can be set to LIST_POISON1 after removal in eventfs_remove_rec, leading to a crash/panic. The vulnerability materializes whe...
VulnCheck KEV: CVE-2021-31250
Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi...
CVE-2022-48629
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. qcomrngread can run into a situation...
chi-rad-soc.org Cross Site Scripting vulnerability OBB-3864938
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-48629 crypto: qcom-rng - ensure buffer for generate is completely filled
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. qcomrngread can run into a situation...
CVE-2022-48629 crypto: qcom-rng - ensure buffer for generate is completely filled
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. qcomrngread can run into a situation...
djangogoboot (1.0.2), foodx-devops-tools (>=0.0.0.post65, <=0.12.0) +3 more potentially affected by CVE-2023-5115 via ansible (4.10.0)
ansible PYPI version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - djangogoboot 1.0.2 - foodx-devops-tools =0.0.0.post65, =11.0.0.0rc1, =0.0.1, =0.3.0, =0.7.1 Source cves: CVE-2023-5115 Source advisory:...
CVE-2023-39341
"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service DoS condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Editio...
worldtaichiday.org Cross Site Scripting vulnerability OBB-3320824
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
matrixctl (>=0.8.0, <=0.10.3), pqrs (0.4.0) +1 more potentially affected by CVE-2021-4041 via ansible-runner (1.4.9)
ansible-runner PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on ansible-runner and may be impacted: - matrixctl =0.8.0, =0.0.1, =0.0.4.dev1 Source cves: CVE-2021-4041 Source advisory: OSV:PYSEC-2022-253...
ansible-navigator (>=0.6.2, <=1.0.0b1), matrixctl (>=0.8.0, <=0.10.3) +3 more potentially affected by CVE-2021-4041 via ansible-runner (>=1.4.6, <=2.0.0.0a5)
ansible-runner PYPI version =1.4.6, =0.6.2, =0.8.0, =0.0.1, =0.0.11, =0.5.7 Source cves: CVE-2021-4041 Source advisory: MEND:CVE-2021-4041...
Chi-Chen Technology Cct95 Chichen Tech Cms SQL Injection Vulnerability
Chi-Chen Technology Cct95 Chichen Tech Cms is a content management system of China's Chi-Chen Technology Chi-Chen Technology. A security vulnerability exists in Chichen Tech CMS, which stems from multiple SQL injection vulnerabilities found in the product list.php file via the id and cid...
Chi-Chen Technology Cct95 Chichen Tech Cms SQL injection vulnerability
Chi-Chen Technology Cct95 Chichen Tech Cms is a content management system of China's Chi-Chen Technology Chi-Chen Technology. A security vulnerability exists in Chichen Tech CMS, which stems from multiple SQL injection vulnerabilities found in the product list.php file via the id and cid...
CVE-2021-31252
An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it...
CVE-2021-31642
A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer 32 bits on the page parameter that will crash the web portal...
CHIYU Technology BF-630W Cross-site Scripting Vulnerability
BF-630W is a web-based fingerprint-secured single-door biometric reader controller from CHIYU Technology CHIYU Technology suffers from a cross-site scripting vulnerability that stems from an unauthenticated XSS vulnerability in several CHIYU Technology IoT devices, including BF-630, BF-450M,...
chi-e.net Cross Site Scripting vulnerability OBB-1443305
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...