MetaCPAN File::Find::Rule 操作系统命令注入漏洞

MetaCPAN File::Find::Rule is a file find module from the MetaCPAN Foundation. An operating system command injection vulnerability exists in MetaCPAN File::Find::Rule version 0.34 and earlier, which stems from improper use of the open function when dealing with specially crafted filenames, and cou...

CVE-2011-10007: Improper Neutralization of Special Elements used in an OS Command

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...

DSA-5936-1 libfile-find-rule-perl - security update

Bulletin has no description...

CVE-2024-32023

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to a path injection in the commongui.py findandreplace function. This vulnerability is fixed in 23.1.5...

CVE-2024-53757

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SocialEvolution WP Find Your Nearest wp-find-your-nearest allows Stored XSS.This issue affects WP Find Your Nearest: from n/a through = 0.3.1...

CVE-2023-30192

Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find...

CVE-2023-21284

In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-42571

Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user lost the device...

CVE-2022-1472

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection...

CVE-2022-36878

Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log...

CVE-2022-30742

Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permissio to get sim card information through device log...

CVE-2022-29940

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\findorderpopup.php leads to multiple cross-site scripting XSS vulnerabilities...

CVE-2021-30804

A permissions issue was addressed with improved validation. This issue is fixed in iOS 14.7. A malicious application may be able to access Find My data...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2020-22122

A SQL injection vulnerability in /oa.php?c=Staff=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

CVE-2015-10065

A vulnerability classified as critical was found in AenBleidd FiND. This vulnerability affects the function initresult of the file validator/myvalidator.cpp. The manipulation leads to buffer overflow. The patch is identified as ee2eef34a83644f286c9adcaf30437f92e9c48f1. It is recommended to apply ...

SUSE CVE-2025-37905

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Balance device refcount when destroying devices Using devicefindchild to lookup the proper SCMI device to destroy causes an unbalance in device refcount, since devicefindchild calls an implicit getdevice: this,...

UBUNTU-CVE-2025-37905

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Balance device refcount when destroying devices Using devicefindchild to lookup the proper SCMI device to destroy causes an unbalance in device refcount, since devicefindchild calls an implicit getdevice: this,...

kernel: ext4: update orig_path in ext4_find_extent()

A flaw was found in the Linux kernel's ext4 filesystem. When the ext4findextent function reallocates a path, it fails to update the original path pointer. A local attacker could exploit this by triggering a specific sequence of filesystem operations, leading to a null pointer dereference and...

kernel: ext4: avoid use-after-free in ext4_ext_show_leaf()

A flaw was found in the Linux kernel's ext4 filesystem. This use-after-free vulnerability occurs in the ext4extshowleaf function when a previously freed or reallocated memory path is incorrectly used. This issue is only triggered when the EXTDEBUG option is enabled, which means it does not affect...