[SECURITY] Fedora 37 Update: rust-rd-hashd-2.1.2-7.fc37

Latency-sensitive pseudo workload for resctl-demo...

[SECURITY] Fedora 37 Update: rust-rd-agent-2.1.2-7.fc37

Management agent for resctl-demo...

Fedora: Security Advisory for rust-resctl-demo (FEDORA-2023-e3c8abd37e)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for rust-rd-agent (FEDORA-2023-e3c8abd37e)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

Needle CVE-2023-0179 exploit This repository contains the e...

Malicious code in identity-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a477ee0216ebeb11047cda0982ae2f0316efca62095a3a8d10cd2d5123f36a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-513 Malicious code in identity-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a477ee0216ebeb11047cda0982ae2f0316efca62095a3a8d10cd2d5123f36a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

voteapp SQL注入漏洞

voteapp is a Flask web application demo by mapoor individual developers. A SQL injection vulnerability exists in voteapp. An attacker could exploit this vulnerability to perform a sql injection attack...

PaginationServiceProvider SQL Injection vulnerability

A vulnerability was found in ttskch PaginationServiceProvider up to 0.x. It has been declared as critical. This vulnerability affects unknown code of the file demo/index.php of the component demo. The manipulation of the argument sort/id leads to sql injection. Upgrading to version 1.0.0 can...

GHSA-WW43-MCVH-35P4 PaginationServiceProvider SQL Injection vulnerability

A vulnerability was found in ttskch PaginationServiceProvider up to 0.x. It has been declared as critical. This vulnerability affects unknown code of the file demo/index.php of the component demo. The manipulation of the argument sort/id leads to sql injection. Upgrading to version 1.0.0 can...

CVE-2014-125029

A vulnerability was found in ttskch PaginationServiceProvider up to 0.x. It has been declared as critical. This vulnerability affects unknown code of the file demo/index.php of the component demo. The manipulation of the argument sort/id leads to sql injection. Upgrading to version 1.0.0 is able ...

Sql injection

A vulnerability was found in ttskch PaginationServiceProvider up to 0.x. It has been declared as critical. This vulnerability affects unknown code of the file demo/index.php of the component demo. The manipulation of the argument sort/id leads to sql injection. Upgrading to version 1.0.0 is able ...

CVE-2014-125029 ttskch PaginationServiceProvider Demo index.php sql injection

A vulnerability was found in ttskch PaginationServiceProvider up to 0.x. It has been declared as critical. This vulnerability affects unknown code of the file demo/index.php of the component demo. The manipulation of the argument sort/id leads to sql injection. Upgrading to version 1.0.0 is able ...

CVE-2014-125029

The CVE-2014-125029 entry concerns the ttskch PaginationServiceProvider up to version 0.x. The vulnerability is a SQL injection caused by improper handling of the sort/id parameter in the demo/index.php file. Upgrading to version 1.0.0 fixes the issue (patch 619de478efce17ece1a3b913ab16e40651e1ea...

PT-2023-10099 · Unknown · Ttskch Paginationserviceprovider

Name of the Vulnerable Software and Affected Versions: ttskch PaginationServiceProvider versions up to 0.x Description: A critical vulnerability was found in the ttskch PaginationServiceProvider. The issue affects the file demo/index.php of the component demo. The manipulation of the sort/id...

An user can delete other user's post

Description As the title, an attacker can delete other user's post via post id can be bruteforce Here is video poc: https://drive.google.com/file/d/18QucWYwkpO9kVPMqNzSQ-ptwrZGk-UP9/view?usp=sharelink Proof of Concept DELETE /api/memo/$1026$ HTTP/2 Host: demo.usememos.com Cookie:...

Archive any private memos + Delete any Shortcut + Edit any Shortcut from other users

Description User can archive any private memos, Delete any Shortcut and Edit any Shortcut from other users via api PATCH /api/memo/8 HTTP/1.1 "id":8,"rowStatus":"ARCHIVED" PATCH /api/shortcut/2 HTTP/1.1 "id":2,"title":"shortahihix","payload":"" DELETE /api/shortcut/2 Proof of Concept Login to...

View any content private memos from other users

Description User can view any content from private private memos from other users via api PATCH /api/memo/8 HTTP/1.1 "id":8,"rowStatus":"ARCHIVED" Proof of Concept Login to website in brower 1 with user A. Login to website in brower 2 with user B. Example: User B have private nemo with id 8. With...

S3Crets_Scanner - Hunting For Secrets Uploaded To Public S3 Buckets

S3cret Scanner tool designed to provide a complementary layer for the Amazon S3 Security Best Practices by proactively hunting secrets in public S3 buckets. Can be executed as scheduled task or On-Demand Automation workflow The automation will perform the following actions: 1. List the public...

Weak password at demo website version 3.1.9

Description The demo website is now version 3.1.9 but still affected of weak password requirement. Proof of Concept 1. Login to the demo website with any users. 2. Use "Change password" function, set the new password is number 1. 3. It's successful, try to re-login to check it...