Apache bRPC Input Validation Error Vulnerability

Apache bRPC is the United States Apache Apache Foundation's industrial-grade RPC framework for building reliable and high-performance services. An input validation error vulnerability exists in Apache bRPC that stems from improper input validation in the product and can be exploited by an attacke...

PT-2023-23117 · Apache · Apache Brpc

Name of the Vulnerable Software and Affected Versions: Apache bRPC versions prior to 1.5.0 Description: A security issue in Apache bRPC allows attackers to execute arbitrary code via the pid file parameter in ServerOptions. This can be exploited by an attacker who can influence the pid file...

CVE-2023-30328

An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...

CVE-2023-30328

An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...

Authentication flaw

An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...

CVE-2023-30328

CVE-2023-30328 describes an authentication bypass in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4. The root cause is a PID reuse issue in the helper, enabling attackers to bypass authentication. The vulnerability is rated CVSS v3.1 with base score 9.8 (CRITICAL), affecting...

CVE-2023-30328

An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...

TOTOLINK X18 命令注入漏洞

The TOTOLINK X18 is a mesh router system from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X18 version V9.1.0cu.2024B20220329, which stems from a command injection vulnerability via the pid parameter in the disconnectVPN function...

CVE-2023-29803

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the pid parameter in the disconnectVPN function...

CVE-2023-24626

A flaw was found in screen. This flaw allows local users to send a SIGHUP signal to any PID due to a missing signal sending permission check, potentially resulting in a denial of service or disruption of the target process...

Design/Logic Flaw

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process...

GNU screen 安全漏洞

GNU Screen is an application from the American GNU community. It provides the effect of obtaining multiple virtual terminals on a single physical terminal. A security vulnerability exists in GNU Screen, which originates when socket.c allows a local user to send a privileged SIGHUP signal to any P...

Exploit for Improper Privilege Management in Podman_Project Podman

CVE-2022-1227Exploit A script for exploiting CVE-2022-1227...

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux SIG Cloud 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 Local Privilege Escalation POC authors: chomp...

CVE-2023-23156

Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page...

PT-2023-18863 · Unknown · Art Gallery Management System Project

Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project in PHP version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the pid parameter in the single-product page. Recommendations: For Art Galler...

SUSE CVE-2005-0077

The DBI library libdbi-perl for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file...

SUSE CVE-2007-6208

sylprint.pl in claws mail tools claws-mail-tools allows local users to overwrite arbitrary files via a symlink attack on the sylprint.USER.PID temporary file...

SUSE CVE-2008-5716

xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to 1 console/tty, 2 console/limit, or 3 image/device-model-pid...