2341 matches found
find-key.ru Open Redirect vulnerability OBB-3516777
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-37473 Limited code execution in zenstruck/collections
zenstruck/collections is a set of helpers for iterating/paginating/filtering collections. Passing callable strings ie system caused the function to be executed. This would result in a limited subset of specific user input being executed as if it were code. This issue has been addressed in commit...
CVE-2023-37473 Limited code execution in zenstruck/collections
zenstruck/collections is a set of helpers for iterating/paginating/filtering collections. Passing callable strings ie system caused the function to be executed. This would result in a limited subset of specific user input being executed as if it were code. This issue has been addressed in commit...
CVE-2023-37473
The CVE affects zenstruck/collections (PHP library). The vulnerability arises when user input is passed as a callable string (e.g., system) to EntityRepository::find() or query(), allowing arbitrary code execution. The issue has been fixed in commit f4b1c488206e1b1581b06fcd331686846f13f19c and re...
CVE-2023-37473
zenstruck/collections is a set of helpers for iterating/paginating/filtering collections. Passing callable strings ie "system" caused the function to be executed. This would result in a limited subset of specific user input being executed as if it were code. This issue has been addressed in commi...
CVE-2023-37473 Limited code execution in zenstruck/collections
zenstruck/collections is a set of helpers for iterating/paginating/filtering collections. Passing callable strings ie system caused the function to be executed. This would result in a limited subset of specific user input being executed as if it were code. This issue has been addressed in commit...
CVE-2023-37473: Improper Neutralization of Special Elements in Output Used by a Downstream Component
zenstruck/collections is a set of helpers for iterating/paginating/filtering collections. Passing callable strings ie system caused the function to be executed. This would result in a limited subset of specific user input being executed as if it were code. This issue has been addressed in commit...
PYSEC-2023-114
DISPUTED A use-after-free issue was discovered in PyFindObjects function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue...
SciPy 资源管理错误漏洞
SciPy is an open source Python algorithm library and math, science, and engineering computation package developed by the Scipy community, which includes modules for linear algebra, integration, special functions, and other computations. A security vulnerability exists in SciPy versions prior to...
CVE-2023-25399
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly...
PYSEC-2023-102
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects function...
6 tips for a cybersecure honeymoon
You've done it, you've got married. The big day is over, and while you're relaxing on honeymoon you definitely don't want to get distracted by security problems. So, we rounded up some quick tips to keep you safe. Refrain from posting on social media about your honeymoon. This is good practice...
find-jobs-cpns-kabupaten-kubu-raya-l9.burung.us Cross Site Scripting vulnerability OBB-3384011
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Medium: mariadb
Issue Overview: getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW. CVE-2021-46659 MariaDB through...
find-key.ru Open Redirect vulnerability OBB-3364364
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-36782
Уязвимость функции ipv6 find tlv модуля net/ipv6/exthdrs core.c ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
PT-2025-43106
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s IPv6 functionality within the ipv6 find tlv function. The issue involves accessing data out of bounds due to insufficient checks on the length of data...
Cross-Site Scripting (XSS)
pimcore/pimcore is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to a lack of user input sanitization in the Edit parameter of the Find & Order feature, which allows an attacker to inject arbitrary JavaScript code into a browser...
The vulnerability of the pde_subdir_find() function in the fs/proc/generic.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the pdesubdirfind function in the fs/proc/generic.c module of the Linux kernel relates to the repeated use of previously freed memory, due to the lack of checks on the results of the functions being called. Exploiting this vulnerability could allow an attacker to cause a...