Code injection

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint...

PT-2023-29814 · Unknown · Thingnario Photon

Name of the Vulnerable Software and Affected Versions: ThingNario Photon version 1.0 Description: An issue in the software allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function at the "thingnario Logger Maintenance Webpage" endpoint...

CVE-2023-46055

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint...

Malicious code in mmolecule-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a6a1f18648beba2a8938064ff1661d516c95d8940377de4bcd2f938360b9588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7971 Malicious code in mmolecule-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a6a1f18648beba2a8938064ff1661d516c95d8940377de4bcd2f938360b9588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in corporate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d338cc997e0f56baeafd5773af498e1e559144af5aa4319bb9f939aa7f3c934b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1514 Malicious code in corporate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d338cc997e0f56baeafd5773af498e1e559144af5aa4319bb9f939aa7f3c934b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-result-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be46efd7d71b6494d55cf52ec783c591c2bfe3524cdfcc6a9d17ed75abb8d492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1525 Malicious code in test-result-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be46efd7d71b6494d55cf52ec783c591c2bfe3524cdfcc6a9d17ed75abb8d492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Hyip Rio 2.1 Cross Site Scripting / File Upload

Exploit Title: Hyip Rio 2.1 - Arbitrary File Upload Exploit Author: CraCkEr Date: 30/07/2023 Vendor: tdevs Vendor Homepage: https://tdevs.co/ Software Link: https://hyiprio-feature.tdevs.co/ Tested on: Windows 10 Pro Impact: Allows User to upload files to the web server CVE: CVE-2023-4382...

Western Digital MyCloud PR4100 Logger Class Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of the Western Digital MyCloud PR4100 NAS device. Authentication is required to exploit this vulnerability. The specific flaw exists within the Logger class. The issue results from the lack of...

CVE-2023-35942

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, gRPC access loggers using listener's global scope can cause a use-after-free crash when the listener is drained. Versions 1.27.0, 1.26.4, 1.25.9,...

Malicious code in hui-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8adc0e25b0e392bbe784365d11891947d5c83abb33b0139293cb33f97b7347d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-510 Malicious code in hui-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8adc0e25b0e392bbe784365d11891947d5c83abb33b0139293cb33f97b7347d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Envoy 资源管理错误漏洞

Envoy is an open source distributed proxy server. Envoy suffers from a resource management error vulnerability that stems from the fact that using a globally scoped gRPC access logger may cause a post-release reuse crash when the listener runs out...

SUSE CVE-2020-23911

An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function defaulterrorlogger located in asn1fix.c. It allows an attacker to cause Denial of Service...

WordPress WP Logger Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Logger Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID fcdb763b1c53 Credits Rafie Muhammad Patchstack Required privilege...

DEBIAN-CVE-2020-23911

An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function defaulterrorlogger located in asn1fix.c. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2020-23911

An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function defaulterrorlogger located in asn1fix.c. It allows an attacker to cause Denial of Service...

asn1c 代码问题漏洞

asn1c is an ASN.1 compiler by the individual developer Lev Walkin. A security vulnerability exists in asn1c v0.9.28 and earlier versions, which stems from a NULL pointer dereference in the function defaulterrorlogger in asn1fix.c. An attacker can cause a denial of service by exploiting this...