The vulnerability of the Spring Core module of the Spring Framework software platform allows attackers to execute arbitrary code.

The vulnerability of the Spring Core module of the Spring Framework is related to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-1000

In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Variable Tampering within joomla/input class

More info at https://developer.joomla.org/security-centre/876-20220307-core-variable-tampering-on-jinput-request-data.html...

CVE-2022-23882

TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...

CVE-2022-23882

TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...

USN-5348-1 smarty3 vulnerabilities

David Gnedt and Thomas Konrad discovered that Smarty was incorrectly sanitizing the paths present in the templates. An attacker could possibly use this use to read arbitrary files when controlling the executed template. CVE-2018-13982 It was discovered that Smarty was incorrectly sanitizing the...

PT-2022-12015

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for cross-site scripting XSS attacks via the class attribute of an element in an HTML e-mail signature. This can potentially lead to malicious script execution on the...

GHSA-62M3-FC7F-JPP8 Parsedown Class-Name Injection

Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a script already running on the affected page executes the contents of any element with a specific class. This occurs because spaces are permitted in code bloc...

Parsedown Class-Name Injection

Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a script already running on the affected page executes the contents of any element with a specific class. This occurs because spaces are permitted in code bloc...

Adobe Flash Player Use-After-Free Vulnerability

Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class...

CVE-2022-27607

Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531...

CVE-2022-27607

Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531...

CVE-2022-27607

Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4_HvccAtom class, a different issue from CVE-2018-14531. Multiple sources (NVD, Red Hat, OSV, CNVD, and others) corroborate this CVE-2022-27607 description. The available documents do not specify a patch or remediation version, only that...

CVE-2022-27607

Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531...

PT-2022-18511

Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-639 Description A heap-based buffer over-read issue exists in the AP4 HvccAtom class. Recommendations For Bento4 version 1.6.0-639, at the moment, there is no information about a newer version that contains a fix for this...

PT-2026-86775

Name of the Vulnerable Software and Affected Versions PocketMine-MP versions prior to 4.2.3 Description The software fails to validate damage metadata values in tool and armor item NBT Named Binary Tag data received from clients. Due to a workaround applied in version 1.13, the TypeConverter uses...

Khan Academy: Enumerate class codes via yahoo dork - Can access any course under teacher - Sensitive information leaked

Hello Team, I am quality researcher and I found some links using yahoo dorking techniques I used yahoo dork site:pl.khanacademy.org/join I used Firefox browser. Steps to reproduce: 1.Go to yahoo search page and use above query to enumerate. 2.Create student account by filling all the required...

CVE-2021-43954

The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have 'can add repository permission', to enumerate the existence of internal network and filesystem resources via a Server-Side Request Forgery SSRF vulnerability...

CVE-2021-3733

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client such as web browser connects to, could trigger a Regular Expression Denial of Service ReDOS during an authentication request with a specially crafted payload that is sen...

USN-5313-1: OpenJDK vulnerabilities

It was discovered that OpenJDK incorrectly handled deserialization filters. An attacker could possibly use this issue to insert, delete or obtain sensitive information. CVE-2022-21248 It was discovered that OpenJDK incorrectly read uncompressed TIFF files. An attacker could possibly use this issu...