CVE-2021-29054: Cross-Site Request Forgery (CSRF)

Certain Papoo products are affected by: Cross Site Request Forgery CSRF in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges remote...

WiZ Connected WiZ Colors A60 安全漏洞

WiZ Connected WiZ Colors A60 is a smart LED light from China-based WiZ Connected. A security vulnerability exists in WiZ Colors A60 1.14.0 that stems from API credentials being logged locally...

LIM OpenEXR Input Validation Error Vulnerability

Industrial Light And Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An input validation error vulnerability exists in OpenEXR B44 uncompression, which can be exploited by an attacker to trigger a shift overflow and potentiall...

LIM OpenEXR 输入验证错误漏洞

Industrial Light And Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An input validation error vulnerability exists in OpenEXR B44 uncompression, which can be exploited by an attacker to trigger a shift overflow and potentiall...

Reverse-Shell-Generator - Hosted Reverse Shell Generator With A Ton Of Functionality

Hosted Reverse Shell generator with a ton of functionality -- great for CTFs Hosted Instance https://revshells.com Features Generate common listeners and reverse shells Automatically copy to clipboard Button to increment the listening port number by 1 URI and Base64 encoding LocalStorage to persi...

CVE-2021-28308

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation...

CVE-2021-27901

An issue was discovered on LG mobile devices with Android OS 11 software. They mishandle fingerprint recognition because local high beam mode LHBM does not function properly during bright illumination. The LG ID is LVE-SMP-210001 March 2021...

[SECURITY] Fedora 33 Update: prosody-0.11.8-1.fc33

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

Changzhou Zhenming Electronic Technology Internet of Things intelligent street light comprehensive management platform has logic flaws and loopholes

Changzhou Zhenming Electronic Science and Technology Co. Legal representative Yuan Chunjuan,The company's business scope includes: research and development of electronic products; technology development of new energy products; electronic products and components, metal materials, mechanical...

Industrial Light And Magic Academy Software Foundation OpenEXR Buffer Overflow Vulnerability

Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic LIM for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation OpenEXR suffers from a buffer overflow vulnerability that can be exploited to cause a denial of service via a...

Ethereum Go-ethereum 资源管理错误漏洞

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A security vulnerability exists in Ethereum Go-ethereum versions prior to 1.9.25, which stems from a denial of service vulnerability that can crash the LES server via a malicio...

Industrial Light And Magic OpenEXR 缓冲区错误漏洞

Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic LIM for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation OpenEXR suffers from a buffer overflow vulnerability that can be exploited to cause a denial of service via a...

Security update for MozillaThunderbird (moderate)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:2022-1 Rating: moderate References: 1178611 Cross-References: CVE-2020-26950 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update f...

HadSky Light Forum program has a file upload vulnerability

HadSky Light Forum program is a personal original PHP system. The HadSky Light Forum program has a file upload vulnerability that can be exploited by attackers to gain control of the server...

HadSky Light Forum program has an override access vulnerability

HadSky Light Forum program is a personal original PHP system. A vulnerability exists in the HadSky Light Forum program that can be exploited by an attacker to gain unauthorized access to administrator information...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2020:1952-1 Rating: important References: Cross-References: CVE-2020-15999 CVE-2020-16000 CVE-2020-16001 CVE-2020-16002 CVE-2020-16003 CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008...

About the security content of Safari 14.0.1

About the security content of Safari 14.0.1 This document describes the security content of Safari 14.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Command Execution Vulnerability in Orange Light Authoring Tool 2017 (Windows Client)

Orange Light Maker Tool 2017 Edition is a development software for text-based development games. A command execution vulnerability exists in Orange Light Production Tool 2017 Windows client, which can be exploited by an attacker to gain control of the server...

Twinkle Light PDF Converter has a Denial of Service Vulnerability

Twinkle Light PDF Converter specializes in PDF conversion software, PDF file converter, including PDF to WORD, PDF to image, image to PDF, PDF to JPG, PDF merger, PDF compression and other related PDF conversion functions. A denial of service vulnerability exists in Scintillate PDF Converter. An...

Scintillating Light PDF Converter has an out-of-bounds writing vulnerability

Twinkle Light PDF Converter specializes in PDF conversion software, PDF file converter, including PDF to WORD, PDF to image, image to PDF, PDF to JPG, PDF merger, PDF compression and other related PDF conversion functions. Scintillate PDF Converter has an out-of-bounds write vulnerability. An...