GHSA-Q45H-CHC8-HVP6 OpenStack Object Storage (Swift) Sensitive Data Exposure

OpenStack Object Storage Swift before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container...

OpenStack Object Storage (Swift) Sensitive Data Exposure

OpenStack Object Storage Swift before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container...

GHSA-XJGH-84HX-56C5 Unrestricted Upload of File with Dangerous Type Apache Tomcat

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default servlet to false it was possible to upload a JSP file to the server via a specially crafted...

TLR-2005KSH - Arbitrary File Upload Vulnerability

Exploit Title: TLR-2005KSH - Arbitrary File Upload Shodan Dork: title:"Login to TLR-2021" Exploit Author: Ahmed Alroky Author Company : Aiactive Version: 1.0.0 Vendor home page : http://telesquare.co.kr/ Authentication Required: No Tested on: Windows CVE: CVE-2021-45428 Vulnerability Description...

TLR-2005KSH Arbitrary File Upload

Exploit Title: TLR-2005KSH - Arbitrary File Upload Date: 2022-05-11 Shodan Dork: title:"Login to TLR-2021" Exploit Author: Ahmed Alroky Author Company : Aiactive Version: 1.0.0 Vendor home page : http://telesquare.co.kr/ Authentication Required: No Tested on: Windows CVE: CVE-2021-45428...

PT-2025-8360

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue in the Linux kernel has been identified, specifically in the io/mm/arm-smmu-v3-sva component. The problem arises from calling arm64 mm context put without holding ...

PT-2025-8391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the ARM: versatile component. The problem arises from the of find compatible node function, which returns a...

PT-2022-37743

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47001 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes dng stream::Put tag data ptr::Put...

PT-2022-30620

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a missing of node put in the nmk pinctrl probe function. This problem was introduced in version v3.9 and is fixed in version v4.19.238. The actual impact and attack...

PT-2022-30702

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description A potential issue exists due to a missing of node put in nmk pinctrl probe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-30338

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential issue exists due to a missing of node put in nmk pinctrl probe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-30377

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential issue exists due to a missing of node put in the at91sam9g20ek audio probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30504

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A potential issue exists due to a missing of node put in nmk pinctrl probe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-30010

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-30087

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.15.32 Description The issue is related to a missing of node put in the nmk pinctrl probe function of the pinctrl nomadik driver. The actual impact and attack plausibility have not yet been proven...

PT-2022-29769

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.16.18 Description A potential issue exists due to a missing of node put in nmk pinctrl probe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.9...

PT-2022-29523

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.17.1 Description A potential issue exists due to a missing of node put in the wcd934x codec parse data function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-29607

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.17.1 Description The issue is related to the drm/virtio component, specifically in the virtio gpu array put free function, where it does not check if objs is NULL. This could potentially lead to security...

PT-2022-29682

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-30374

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.10.109 Description A potential issue exists due to a missing of node put in the wcd934x codec parse data function. The actual impact and attack plausibility have not yet been proven. Recommendations For...