32 matches found
Desdev DedeCMS 代码问题漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A code issue vulnerability exists in...
[H1] Owner of frxETHMinter can rug pull the contract
Lines of code Vulnerability details Impact Owner of the contract is able to leave with all the tokens and ETH of the contract, which makes protocol trustless PoC You have implemented a function to function recoverEtheruint256 amount external onlyByOwnGov bool success, = addressowner.call value:...
CVE-2022-36085
A flaw was found in open-policy-agent. The Rego compiler provides a deprecated WithUnsafeBuiltins function, allowing users to provide a set of built-in functions that should be deemed unsafe and rejected by the compiler if encountered in the policy compilation stage. A bypass of this protection c...
CVE-2020-21525
Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it...
The vulnerability of the NTLMv2 network protocol implementation in Windows operating systems allows a hacker to carry out a “man-in-the-middle” type attack.
The vulnerability of the NTLMv2 network protocol implementation in Windows operating systems relates to the bypassing of security functions. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack by sending LMV2 responses...
phpcms_v9. 6. 0_sql injected with exp-vulnerability warning-the black bar safety net
Today or yesterday Suddenly the whole circle are in the Ask a phpcms v9 vulnerability Here we have several unpublished Later, after confirmed, The you is to this injection vulnerabilities This vulnerability of the document has been in the small stream. phpcmsv9. 6. 0sql injection analysis...
PHPCMS v9 wap module SQL injection
Suspicious of the function 1. localhost/phpcms/modules/attachment/attachments. php file of the first 241GET submitted to the src variable to bring the saferelace function, and now we're into this damn filter function to see what it's doing 2. The filter function profile and bypass...
sudo: noexec bypass via system() and popen()
It was discovered that the sudo noexec restriction could have been bypassed if application run via sudo executed system or popen C library functions with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could use this flaw to execute...
The Mac OS X operating system, and found 2 pieces of Privilege elevation 0day vulnerabilities-vulnerability warning-the black bar safety net
Apple Mac OS X operating system, and found 2 pieces new, 0day vulnerabilities, if an attacker successfully exploited, may be in the victim's equipment on elevated privileges to get root access. Vulnerability details These two vulnerabilities is by Italian security researcher Luca Todesco found, a...
Incomplete List of Disallowed Inputs
A flaw in the iptype function is triggered when handling octal encoding. This may allow a remote attacker to bypass the IP exclusion feature...
deV!L`z Clanportal 1.5.5 Moviebase SQL Injection
======================================================================================== | Title : deV!Lz Clanportal 1.5.5 Moviebase Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Download : http://www.modsbar.de/Addons/79/moviebase/ | Script : deV!Lz Clanportal 1.5.5 Moviebase ...