CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

CVE-2024-30923: Improper Control of Generation of Code

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

CVE-2024-30927

DerbyNet versions 9.0 and below are vulnerable to a Cross-Site Scripting (XSS) vulnerability within the racer-results.php component. The root cause is the improper validation of user-supplied input specifically involving the racerid parameter. An attacker can exploit this to execute arbitrary cod...

PT-2024-23673 · Derbynet · Derbynet

Name of the Vulnerable Software and Affected Versions: DerbyNet versions 9.0 and below Description: The issue allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering. This is a SQL Injection vulnerability. Recommendations: For DerbyNet versions 9.0 and...

DerbyNet 9.0 racer-results.php Cross Site Scripting

CVE ID: CVE-2024-30927 Description: A Cross-Site Scripting XSS vulnerability is present in DerbyNet version 9.0, specifically within the racer-results.php component. This issue allows remote attackers to execute arbitrary code through the improper handling of the racerid parameter. The...

PT-2024-23677 · Derbynet · Derbynet

Name of the Vulnerable Software and Affected Versions: DerbyNet versions 9.0 and below Description: The issue allows attackers to execute arbitrary code via the racer-results.php component. This is a Cross Site Scripting vulnerability. Recommendations: For DerbyNet versions 9.0 and below, conside...

DerbyNet 9.0 print/render/racer.inc SQL Injection

CVE ID: CVE-2024-30923 Description: An SQL Injection vulnerability has been discovered in DerbyNet version 9.0, specifically within the print/render/racer.inc component. This vulnerability allows remote attackers to execute arbitrary code and disclose sensitive information by exploiting improper...

CVE-2020-19767

A lack of target address verification in the destroycontract function of 0xRACER 1.0 allows attackers to steal tokens from victim users via a crafted script...

0xRACER 输入验证错误漏洞

0xRACER is a new team-based pool lottery game. 0xRACER is vulnerable to an input validation error stemming from a lack of target address validation in the destroycontract function of 0xRACER version 1.0, which could be exploited by an attacker to steal a token from a victim user via a carefully...

Racer Live Companion suffers from dll hijacking vulnerability

Racer Live Companion is the latest launch of the live broadcast software developed by Beijing Racer Technology Co., Ltd. users with live access can use the Racer Live Companion for live broadcasts, anchors can play games while live. Racer live partner dll hijacking vulnerability, attackers can us...

CVE-2020-25489

A heap overflow in Sqreen PyMiniRacer aka Python Mini Racer before 0.3.0 allows remote attackers to potentially exploit heap corruption...

CVE-2020-25489

A heap overflow in Sqreen PyMiniRacer aka Python Mini Racer before 0.3.0 allows remote attackers to potentially exploit heap corruption...

PYSEC-2020-93

A heap overflow in Sqreen PyMiniRacer aka Python Mini Racer before 0.3.0 allows remote attackers to potentially exploit heap corruption...

CVE-2020-25489

CVE-2020-25489 describes a heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) prior to 0.3.0, which can lead to heap corruption. Affected component: Py MiniRacer library used by Sqreen. Impact per sources: potential remote exploitation via heap overflow; no explicit exploit details in th...

Racer Live Companion installer suffers from dll hijacking vulnerability

Racer Live Companion is a live broadcasting aid based on Racer Open. There is a dll hijacking vulnerability in the installer of Racer Live Companion. Attackers can use the vulnerability to load malicious dll and execute malicious code...

Racer Live Companion pc client software suffers from dll hijacking vulnerability

Racer Live Companion is a special live broadcasting tools for Racer hosts, with video beauty features, rich material, perfect video editing and other features. Racer live partner pc client software dll hijacking vulnerability, attackers can use the vulnerability to inject DLL files to execute...

racer.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-627655 Description| Value ---|--- Affected Website:| racer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Racer App has information leakage vulnerability

Racer is a camera and self sharing app. Racer APP has an information leakage vulnerability due to its lack of effective checksum on INTENT. An attacker can directly access to any user's private information, including personal data, private works and messages...

Speed Cars: Real Racer Need 3D - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Speed Cars: Real Racer Need 3D published at the 'play' market has multiple vulnerabilities...

Desert Traffic Racer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Desert Traffic Racer published at the 'play' market has multiple vulnerabilities...