Dompdf 安全漏洞

Dompdf is an HTML to PDF converter. A security vulnerability exists in Dompdf versions prior to 2.0.0, which originates from an externally controlled filename or path...

Exploit for CVE-2022-30190

CVE-2022-30190EXPPowerPoint This is exploit of CVE-2022-301...

MAL-2022-6612 Malicious code in topicmodeling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58368b384698175b4023e096d423a5a8c3a22d4dbb8651b2b4c9ad74c19d3161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31753

The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability...

Exploit for CVE-2022-30190

Follina-CVE-2022-30190 Proof of Concept by Nee Usage ba...

Exploit for CVE-2022-30190

Follina-CVE-2022-30190 Proof of Concept by Nee Usage ba...

Exploit for CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 CVE-2022-30190 Follina POC Hos...

Exploit for CVE-2022-30190

CVE-2022-30190-follina Just another PoC for the new MSDT-Explo...

Exploit for CVE-2022-30190

CVE-2022-30190 Usag...

Exploit for CVE-2022-30190

Follina Proof of Concept CVE-2022-30190 Quick and easy "pro...

Exploit for CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html...

The vulnerability of the Spring Core module of the Spring Framework software platform allows attackers to execute arbitrary code.

The vulnerability of the Spring Core module of the Spring Framework is related to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Externally Controlled Reference to a Resource in Another Sphere

A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the lo...

Design/Logic Flaw

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors...

CVE-2021-27648

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors...

Asterisk DoS Vulnerability (AST-2021-004)

Asterisk is prone to a denial of service vulnerability where an unsuspecting user could crash Asterisk with multiple hold/unhold requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2018-12475

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-downloadfiles of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects:...

CVE-2018-12475

The CVE-2018-12475 entry concerns an Externally Controlled Reference to a Resource in Another Sphere in openSUSE Open Build Service’s obs-service-download_files component. The vulnerability allows authenticated users to generate HTTP requests targeting internal networks, potentially leading to da...