CVE-2021-40281: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dlprint.php when registering ordinary users...

PT-2021-26679

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.3 through 5.15.1 Description: The issue is related to a use-after-free in rtl8712 dl fw. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.3 through 5.15.1...

PT-2021-30674

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.15.1 Description The issue is related to a use-after-free in rtl8712 dl fw. It was introduced in version v3.3 and fixed in version v5.15.2. The actual impact and attack plausibility have not yet been proven...

PT-2021-30537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.79 Description The issue is related to a use-after-free in rtl8712 dl fw. It was introduced in version v3.3 and fixed in Linux Kernel version v5.10.79. The actual impact and attack plausibility have not yet...

PT-2021-26542

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.10.78 Description The issue is related to a use-after-free in rtl8712 dl fw. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.3 and fixed in Linux Kernel...

PT-2021-26609

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.18 Description The issue is related to a use-after-free in rtl8712 dl fw. It was introduced in version v3.3 and fixed in version v5.14.18. The actual impact and attack plausibility have not yet been proven...

PT-2021-8188

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the rtl8712 dl fw function. The problem occurs due to a race condition between r871xu dev remove and -ndo open callback, where t...

dl-manual.com Cross Site Scripting vulnerability OBB-2168770

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-19957

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dlprint.php page...

PT-2021-10426

Name of the Vulnerable Software and Affected Versions: zz cms version 2019 Description: A SQL injection issue allows attackers to retrieve sensitive data via the dlid parameter in the "/dl/dl sendsms.php" page cookie. Recommendations: For zz cms version 2019, consider restricting access to the...

PT-2021-10424

Name of the Vulnerable Software and Affected Versions: zz cms version 2019 Description: A SQL injection issue has been found that allows attackers to retrieve sensitive data by exploiting the id parameter on the "/dl/dl print.php" API endpoint. Recommendations: For zz cms version 2019, consider...

CVE-2020-19959: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendmail.php page cookie...

ZZCMS SQL Injection Vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the id parameter on the application's /dl/dlprint.php page. An attacker could u...

CVE-2020-19957: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dlprint.php page...

CVE-2020-19960: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendsms.php page cookie...

CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

PT-2021-6582

Name of the Vulnerable Software and Affected Versions Ribbonsoft dxflib version 3.17.0 Description A code execution issue exists in the DL Dxf::handleLWPolylineData functionality, related to a heap buffer overflow. This can be triggered by a specially-crafted .dxf file, allowing an attacker to...

CVE-2021-26698

OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet user-generated content when a sharing link is created and the dl parameter is used...

PT-2021-17096

Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.3-rev32 OX App Suite version 7.10.4 prior to 7.10.4-rev18 Description The issue allows for XSS via a code snippet, specifically user-generated content, when a sharing link is created and the dl parameter is...

CVE-2021-26698: Improper Neutralization of Input During Web Page Generation

OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet user-generated content when a sharing link is created and the dl parameter is used...