DeShang DSShop Access Control Error Vulnerability

DeShang DSShop is a single-store mobile mall online store system from DeShang, China. The access control error vulnerability exists in DeShang DSShop prior to version 3.1.0. The vulnerability stems from the file public/install.php of the component HTTP GET Request Handler, which results in...

Security Bulletin: NVIDIA DGX A100 - January 2024

NVIDIA has released a firmware security update for the NVIDIA DGX™ A100 system. To protect your system, download and install this firmware update through the NVIDIA Enterprise Support Portal. Go to NVIDIA Product Security...

DeShang DSCMS Access Control Error Vulnerability

DeShang DSCMS is a website builder for enterprise websites from DeShang, China. An access control error vulnerability exists in DeShang DSCMS prior to version 3.1.2, which stems from the file public/install.php that causes incorrect access control...

PT-2024-15535 · Deshang · Deshang Dsshop

Name of the Vulnerable Software and Affected Versions: DeShang DSShop versions up to 3.1.0 Description: A vulnerability was found in the HTTP GET Request Handler component, specifically affecting the file public/install.php. This issue leads to improper access controls and can be initiated...

CVE-2024-0358

A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...

CVE-2024-0358: Improper Access Control

A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...

DeShang DSO2O Access Control Error Vulnerability

DeShang DSO2O is a new retail e-commerce system from DeShang, China. An Access Control Error vulnerability exists in DeShang DSO2O version 4.1.0 and earlier, which stems from an unknown section in /install/install.php that results in incorrect access control...

2024-01 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5034129)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

PT-2024-15493

Name of the Vulnerable Software and Affected Versions DeShang DSO2O versions up to 4.1.0 Description A critical issue has been found, affecting an unknown part of the file /install/install.php. This leads to improper access controls and can be initiated remotely. The exploit has been disclosed...

Malicious code in dont-install-me-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0c81039808d69543955f41b51ab4057b60025dedbfbdbb94669067d3add194c The OpenSSF Package Analysis project identified 'dont-install-me-1' @ 1.2.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in dont-install-me0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bcf8126d43ca2823d8d0d521cade7b0889b21af7135c79116a1f03139011cf43 The OpenSSF Package Analysis project identified 'dont-install-me0' @ 1.2.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-45 Malicious code in dont-install-me0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bcf8126d43ca2823d8d0d521cade7b0889b21af7135c79116a1f03139011cf43 The OpenSSF Package Analysis project identified 'dont-install-me0' @ 1.2.3 npm as malicious. It is considered malicious because: - The package...

CVE-2024-0246

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25alertdocument.domain leads to cross site scripting. ...

PT-2024-15408 · Icewarp · Icewarp

Name of the Vulnerable Software and Affected Versions: IceWarp versions 12.0.2.1 through 12.0.3.1 Description: A problematic issue has been discovered, affecting the Utility Download Handler component in the /install/ file. The issue can be exploited by manipulating the lang argument with a...

CVE-2023-7193

A vulnerability was found in MTab Bookmark up to 1.2.6 and classified as critical. This issue affects some unknown processing of the file public/install.php of the component Installation. The manipulation leads to improper access controls. The complexity of an attack is rather high. The...

CVE-2023-52286

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

CVE-2023-52286

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

CVE-2023-52286: Exposure of Sensitive Information to an Unauthorized Actor

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

MTab Bookmark Access Control Error Vulnerability

MTab Bookmark is a clean cut powerful navigation site from MTab Inc. MTab Bookmark is a simple and powerful navigation site from MTab, which allows you to quickly add your favorite websites to your bookmarks. An access control error vulnerability exists in MTab Bookmark version 1.2.6 and classifi...

PT-2023-31957 · Tencent · Tdsqlpcloud

Name of the Vulnerable Software and Affected Versions: Tencent tdsqlpcloud versions 1.8.5 and earlier Description: The issue allows unauthenticated remote attackers to discover database credentials via an "index.php/api/install/get db info" request. This is a related issue to another previously...