132 matches found
CVE-2024-3507 Privilege escalation vulnerability in Lunar
Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...
Lunar 安全漏洞
Lunar is a tool that uses the DDC protocol to change the hardware brightness of a monitor. A security vulnerability exists in Lunar versions 6.0.2 through 6.6.0 that originates from a vulnerability that allows an attacker to perform auxiliary process injection into the Lunar application and abuse...
Lunar 资源管理错误漏洞
Lunar is a tool that uses the DDC protocol to change the hardware brightness of a monitor. A resource management error vulnerability exists in Lunar versions 6.0.2 through 6.6.0 that originates from a vulnerability that allows an attacker to perform auxiliary process injection into the Lunar...
Malicious code in lunar-sb.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387a2f7e6dc2c3022b63ec2ea875bfdbcc6ee0fd07b1ff68475859ea718566d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-141 Malicious code in lunar-sb.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387a2f7e6dc2c3022b63ec2ea875bfdbcc6ee0fd07b1ff68475859ea718566d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Incorrect Authorization in Canonical Ubuntu_Linux
GameOverlay Ubuntu Privilege Escalation CVE-2023-2640...
USN-5739-2 mariadb-10.3, mariadb-10.6 regression
USN-5739-1 fixed vulnerabilities in MariaDB. It caused a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: MariaDB has been updated to 10.3.38 in Ubuntu 20.04 LTS and to 10.6.12 in Ubuntu 22.04 LTS and Ubuntu 22.10...
[SECURITY] [DLA 3171-1] distro-info-data database update
Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 30, 2022 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.41+deb10u6 This is a routine update of the distro-info-data database for Debian LTS users. It includes...
April 7, 2020, update for Office 2016 (KB4484248)
None None...
This Is Not a Test: APT41 Initiates Global Intrusion Campaign Using Multiple Exploits
Beginning this year, FireEye observed Chinese actor APT41 carry out one of the broadest campaigns by a Chinese cyber espionage actor we have observed in recent years. Between January 20 and March 11, FireEye observed APT41 attempt to exploit vulnerabilities in Citrix NetScaler/ADC, Cisco routers,...
Description of the security update for Office 2016: June 13, 2017
None None...
Chinese Food - Lunar New Year! - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Chinese Food - Lunar New Year! published at the 'play' market has multiple vulnerabilities...
Slots Lunar Wolf Casino Slots - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Slots Lunar Wolf Casino Slots published at the 'play' market has multiple vulnerabilities...
Lunar CMS 3.3 File Upload
File upload vulnerability in Lunar CMS Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
CVE-2014-4718
Multiple cross-site request forgery CSRF vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack the authentication of administrators for requests that 1 add Super users via a request to admin/usercreate.php or conduct cross-site scripting XSS attacks via the 2 email or 3 subje...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack the authentication of administrators for requests that 1 add Super users via a request to admin/usercreate.php or conduct cross-site scripting XSS attacks via the 2 email or 3 subje...
CVE-2014-4718
CVE-2014-4718 concerns Lunar CMS, affected before version 3.3-3. The issue combines CSRF and stored XSS: remote attackers can hijack administrator sessions via forged requests to admin/user_create.php (add Super users) and craft input in the contact_form.ext.php parameters (email/subject) to admi...
CVE-2014-4718
Multiple cross-site request forgery CSRF vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack the authentication of administrators for requests that 1 add Super users via a request to admin/usercreate.php or conduct cross-site scripting XSS attacks via the 2 email or 3 subje...
Lunar CMS 3.3 Unauthenticated Remote Command Execution Exploit
No description provided by source. ?!/usr/bin/env python Lunar CMS 3.3 Unauthenticated Remote Command Execution Exploit Vendor: Lunar CMS Product web page: http://www.lunarcms.com Affected version: 3.3 Summary: Lunar CMS is a freely distributable open source content management system written for...
Lunar CMS 3.3 - CSRF And Stored XSS Vulnerability
No description provided by source. ?!-- Lunar CMS 3.3 CSRF And Stored XSS Vulnerability Vendor: Lunar CMS Product web page: http://www.lunarcms.com Affected version: 3.3 Summary: Lunar CMS is a freely distributable open sourcecontent management system written for use on servers running the ever s...