7709 matches found
CVE-2021-44629
A Buffer Overflow vulnerabilitiy exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/register feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...
PT-2022-2423
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the pfkey register function in net/key/af key.c allows a local, unprivileged user to gain access to kernel memory. This can lead to a system crash or a leak of internal kernel...
Open Redirect
djangospirit is vulnerable to open redirect. The vulnerability exists because the return url parameter is not properly validated during login, logout, register, and resend-activation, which allows an attacker to parse malicious URLs to redirect the user...
PT-2022-2269
Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 2.3.8 Description A Buffer Overflow issue exists in the /cloud config/router post/register feature, allowing malicious users to execute arbitrary code on the system via a crafted post request. The vulnerability is cause...
Siemens Mendix 安全漏洞
Forgot Password module allows users to register applications or reset their own passwords without the need for administrator involvement...
GHSA-5P9J-W2WX-QX4C Open Redirect in django-spirit
django-spirit prior to version 0.12.3 is vulnerable to open redirect. In the /user/login endpoint, it doesn't check the value of the next parameter when the user is logged in and passes it directly to redirect which result to open redirect. This also affects /user/logout, /user/register,...
Open Redirect in django-spirit
django-spirit prior to version 0.12.3 is vulnerable to open redirect. In the /user/login endpoint, it doesn't check the value of the next parameter when the user is logged in and passes it directly to redirect which result to open redirect. This also affects /user/logout, /user/register,...
PT-2022-13487
Name of the Vulnerable Software and Affected Versions spirit versions prior to 0.12.3 django-spirit versions prior to 0.12.3 Description The issue is related to multiple open redirects in the GitHub repository. Specifically, the /user/login endpoint does not check the value of the next parameter...
CVE-2022-25471
An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...
CVE-2022-25114
Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...
CVE-2022-25114
Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...
CVE-2022-25471
An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...
CVE-2022-25471: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...
PT-2022-17317
Name of the Vulnerable Software and Affected Versions OpenEMR version 6.0.0 Description The issue is related to an Insecure Direct Object Reference IDOR vulnerability. It allows any authenticated attacker to access and modify unauthorized areas. This can be achieved by sending a crafted POST...
PT-2025-7961
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential null pointer issue has been identified in the Linux kernel, specifically in the ASoC Audio System on Chip component. The issue arises from the snd soc register card function...
PT-2022-7479
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.1 Description A critical vulnerability in the Linux kernel has been resolved, affecting versions prior to 5.17.1. The vulnerability is related to a use-after-free issue in the nf register net hook function,...
DEBIAN-CVE-2021-3608
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMAREGDSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The...
PT-2022-7490 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a race condition in the configfs component of the Linux kernel. When configfs register subsystem or configfs unregister subsystem is executing link grou...
Multiple Open Redirect
Description In the /user/login endpoint, it doesnt check the value of the next parameter when the user is logged in and pass it directly to redirect which result to open redirect. The bug also exist in /user/logout, /user/register, /user/login, /user/resend-activation. Proof of Concept 1. Go to...