CVE-2023-45919

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

CVE-2023-40289

A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges...

CVE-2023-40289

A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges...

CVE-2023-45919

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

PT-2024-23272 · Unknown · Infinitum Form Geo Controller

Name of the Vulnerable Software and Affected Versions: INFINITUM FORM Geo Controller versions n/a through 8.6.4 Description: The issue is related to Deserialization of Untrusted Data, which affects the Geo Controller. Recommendations: For versions n/a through 8.6.4, at the moment, there is no...

Supermicro X11 安全漏洞

The Supermicro X11 is a server motherboard from American Supermicro Computer Supermicro. A security vulnerability exists in Supermicro X11SSM-F, X11SAE-F, X11SSE-F version 1.66. An attacker could exploit this vulnerability to elevate the privileges of a user with BMC administrative privileges...

PT-2024-2417 · Cisco · Cisco Aironet Access Points +2

Name of the Vulnerable Software and Affected Versions: Cisco Access Point AP Software affected versions not specified Cisco Aironet Access Points AP affected versions not specified Cisco Wireless LAN Controller WLC affected versions not specified Description: A vulnerability in the IP packet...

PT-2024-2578 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Wireless LAN Controllers WLCs affected versions not specified Description: A vulnerability in the multicast DNS mDNS gateway feature could allow an unauthenticated, adjacent attacker to cause a denial of service DoS...

WordPress Plugin Widgets Controller 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

Oracle Session Border Controller (SBC) Detection

Binary data oraclesbcdetect.nbin...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that when attempting to connect to hardware through a GPINT mailbox, DMCUB may be idle, causing the...

WordPress Geo Controller Plugin <= 8.6.4 is vulnerable to PHP Object Injection

Software Geo Controller Type Plugin Vulnerable versions = 8.6.4 Fixed in 8.6.5 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-30227 Patch priority High CVSS severity High 9 Developer Claim ownership PSID d77f0684feba Credits LVT-tholv2k Required privilege...

PT-2024-21219 · Indianic · Indianic Widgets Controller

Name of the Vulnerable Software and Affected Versions: IndiaNIC Widgets Controller versions 1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker...

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

Scalapay 安全漏洞

Scalapay is an e-commerce software from Scalapay Inc. A security vulnerability exists in Scalapay v.1.2.41 and earlier versions that stems from the presence of a SQL injection vulnerability. An attacker can exploit the vulnerability to escalate privileges via the...

PT-2024-22413 · Scalapay · Scalapay

Name of the Vulnerable Software and Affected Versions: Scalapay versions 1.2.41 and earlier Description: The issue allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method. This is a SQL injection vulnerability. Recommendations: For Scalapay...

Reflectionless Templates With Spring

A few Java libraries have shown up recently that use text templates, but compile to Java classes at build time. They can thus claim to some extent to be "reflection free". Together with potential benefits of runtime performance, they promise to be easy to use and integrate with GraalVM native ima...

ZhiCms 安全漏洞

ZhiCms is a professional buy-worthy system for the ZhiCms community. ZhiCms version 4.0 has a security vulnerability that stems from the parameter sitename in the file app/manage/controller/setcontroller.php that causes code injection...

MISP 安全漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics with features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.187 that stems from...

MISP 安全漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics with features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.187, which stems from uploadLo...