5459 matches found
OpenSeaMap online_chart 跨站脚本漏洞
onlinechart is an OpenSeaMap open source OpenSeaMap full-screen browser chart. OpenSeaMap onlinechart 1.2 version of a cross-site scripting vulnerability , the vulnerability stems from the file index.php function init there are problems with the operation of the parameter mtext will lead to...
Apache Tomcat On Ubuntu Log Init Privilege Escalation
This exploit sample shows how an exploit module could be written to exploit a bug in a command on a linux computer for priv esc. class MetasploitModule 'Apache Tomcat on Ubuntu Log Init Privilege Escalation', 'Description' = %q Tomcat 6, 7, 8 packages provided by default repositories on...
Apache Tomcat On Ubuntu Log Init Privilege Escalation Exploit
This Metasploit module targets a vulnerability in Tomcat versions 6, 7, and 8 on Debian-based distributions where these older versions provide a vulnerable tomcat init script that allows local attackers who have already gained access to the tomcat account to escalate their privileges from the...
MobileDetect 跨站脚本漏洞
MobileDetect is a PHP class for detecting mobile devices. A cross-site scripting vulnerability exists in MobileDetect version 2.8.31, which stems from a problem with the initLayoutType function in the file examples/sessionexample.php in the component Example, which can lead to cross-site scriptin...
PT-2023-10821 · Unknown · Mobiledetect
Name of the Vulnerable Software and Affected Versions: MobileDetect version 2.8.31 Description: A problematic issue has been found in MobileDetect, affecting the initLayoutType function of the examples/session example.php file in the Example component. The manipulation of the argument $ SERVER'PH...
PT-2025-54037
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the ov5675 init controls function within the media/i2c/ov5675.c file. This leak occurs when testing with a bpf mock device, specifically during...
GSD-2023-1001829 efi: fix NULL-deref in init error path
efi: fix NULL-deref in init error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.270 by commit...
GSD-2023-1001788 efi: fix NULL-deref in init error path
efi: fix NULL-deref in init error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...
GSD-2023-1001754 efi: fix NULL-deref in init error path
efi: fix NULL-deref in init error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...
GSD-2023-1001692 efi: fix NULL-deref in init error path
efi: fix NULL-deref in init error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit adc96d30f6503d30dc68670c013716f1d9fcc747...
PT-2023-34768 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: A NULL-deref issue was discovered in the init error path of the EFI module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...
PT-2024-11780
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the Linux kernel. Specifically, the ifcvf mgmt dev leaks memory if it is not freed before returning. A call is made to the correct return stateme...
CVE-2023-24165
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo...
GSD-2023-1001602 orangefs: Fix sysfs not cleanup when dev init failed
orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...
GSD-2023-1001406 orangefs: Fix sysfs not cleanup when dev init failed
orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...
GSD-2023-1001291 cpufreq: Init completion before kobject_init_and_add()
cpufreq: Init completion before kobjectinitandadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...
GSD-2023-1001180 drm/amdgpu/powerplay/psm: Fix memory leak in power state init
drm/amdgpu/powerplay/psm: Fix memory leak in power state init This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...
GSD-2023-1000682 orangefs: Fix sysfs not cleanup when dev init failed
orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
PT-2023-33281 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: A potential issue exists in the greth init rings function, which may lead to a skb leak. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...
PT-2023-33100 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: A memory leak was discovered in the ipc mux init function. The issue was introduced in version v5.18 and is fixed in Linux Kernel version v6.0.13. Recommendations: For Linux Kernel versions...