Lucene search
+L

208 matches found

Patchstack
Patchstack
•added 2024/10/09 12:00 a.m.•19 views

WordPress Disc Golf Manager Plugin <= 1.0.0 is vulnerable to PHP Object Injection

Software Disc Golf Manager Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-48026 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID ad0f79b4fc3a Credits LVT-tholv2k Required privilege...

9.8CVSS6.8AI score0.00523EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
•added 2024/06/18 2:44 a.m.•10 views

SUSE CVE-2024-36600

Buffer Overflow Vulnerability in libcdio 2.2.0 fixed in 2.3.0 allows an attacker to execute arbitrary code via a crafted ISO 9660 image file...

8.4CVSS8AI score0.0036EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2024/04/16 12:00 a.m.•18 views

The vulnerability of the SCSI CD/DVD Device Emulation mode in VMware Fusion and Vmware Workstation allows a hacker to execute arbitrary code.

The vulnerability of the SCSI CD/DVD Device Emulation mode in VMware Fusion and Vmware Workstation lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.6AI score0.00867EPSS
SaveExploits0References4Affected Software2
OSV
OSV
•added 2024/03/21 2:52 a.m.•15 views

CVE-2024-2712

A vulnerability, which was classified as critical, has been found in Campcodes Complete Online DJ Booking System 1.0. This issue affects some unknown processing of the file /admin/user-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated...

6.5CVSS5.7AI score0.00601EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/03/21 12:00 a.m.•17 views

Campcodes Complete Online DJ Booking System SQL注入漏洞

Campcodes Complete Online DJ Booking System is an online DJ booking system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Complete Online DJ Booking System, which originates from a SQL injection vulnerability in the searchdata parameter of the...

6.5CVSS7AI score0.00601EPSS
SaveExploits1References4
OSV
OSV
•added 2024/03/20 8:15 p.m.•11 views

CVE-2024-2715

A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/user-search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launche...

6.1CVSS3.8AI score0.00536EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•15 views

Campcodes Complete Online DJ Booking System Cross-Site Scripting Vulnerability

Campcodes Complete Online DJ Booking System is an online DJ booking system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Online DJ Booking System, which stems from a cross-site scripting vulnerability in the adminname parameter of the...

6.1CVSS6.2AI score0.00506EPSS
SaveExploits1References4
OSV
OSV
•added 2024/02/21 10:14 p.m.•10 views

MAL-2024-1028 Malicious code in disc-web-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12df226ff9607452aa9f412f4bbaffcae930e8586ee8348d0d9aa9d03238f050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/02/21 10:14 p.m.•7 views

Malicious code in disc-web-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12df226ff9607452aa9f412f4bbaffcae930e8586ee8348d0d9aa9d03238f050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
The Hacker News
The Hacker News
•added 2024/01/30 1:45 p.m.•52 views

China-Linked Hackers Target Myanmar's Top Ministries with Backdoor Blitz

The China-based threat actor known as Mustang Panda is suspected to have targeted Myanmar's Ministry of Defence and Foreign Affairs as part of twin campaigns designed to deploy backdoors and remote access trojans. The findings come from CSIRT-CTI, which said the activities took place in November...

7.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/10/10 2:55 a.m.•9 views

disc-order.com Cross Site Scripting vulnerability OBB-3737287

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/04/25 12:00 a.m.•11 views

PT-2023-9002 · Vmware · Vmware Workstation +1

Name of the Vulnerable Software and Affected Versions: VMware Workstation and Fusion affected versions not specified Description: The issue is related to an out-of-bounds read/write vulnerability in the SCSI CD/DVD device emulation of VMware Workstation and Fusion. This vulnerability can be...

8.8CVSS8.8AI score0.00867EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2023/04/25 12:00 a.m.•16 views

VMware Workstation和VMware Fusion 缓冲区错误漏洞

VMware Workstation and VMware Fusion are both products of VMware, Inc. VMware Workstation is a suite of virtual machine software that provides the ability to run multiple different operating systems simultaneously. VMware Workstation is a suite of virtual machine software that provides the abilit...

8.8CVSS8.5AI score0.00867EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 6:19 a.m.•7 views

SUSE CVE-2004-1190

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices...

2.1CVSS6.8AI score0.00396EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 6:09 a.m.•8 views

SUSE CVE-2007-6613

Stack-based buffer overflow in the printiso9660recurse function in iso-info src/iso-info.c in GNU Compact Disc Input and Control Library libcdio 0.79 and earlier allows context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image that...

5CVSS8.1AI score0.12725EPSS
SaveExploits3References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:10 a.m.•10 views

SUSE CVE-2015-8930

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service infinite loop via an ISO with a directory that is a member of itself...

7.5CVSS6.8AI score0.04287EPSS
SaveExploits0References5
HackRead
HackRead
•added 2022/11/26 1:52 a.m.•23 views

How to Create ISO Files from Discs – 3 Best Ways

By Owais Sultan This article will explain to you how to create ISO files from discs while mentioning 3 top ISO creators which are easy to understand and use; This is a post from HackRead.com Read the original post: How to Create ISO Files from Discs – 3 Best Ways...

2.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/11/11 12:00 a.m.•16 views

The vulnerability of the file system driver of the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the file system driver for the Microsoft Windows operating system is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created ISO file...

10CVSS7.7AI score0.56269EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•11 views

PT-2022-5404 · Microsoft · Windows Cd-Rom File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows CD-ROM File System Driver affected versions not specified Description: The issue is related to an integer overflow in the Windows CD-ROM File System Driver. This allows a remote attacker to execute arbitrary code by using a specially...

10CVSS9.6AI score0.56269EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2022/03/28 12:00 a.m.•15 views

The vulnerability of the CD-ROM driver of the Microsoft Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Microsoft Windows operating system’s CD-ROM driver is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00925EPSS
SaveExploits0References5
Rows per page
Query Builder