440 matches found
CVE-2025-3047 Path Traversal in AWS SAM CLI allows file copy to build container
When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...
CVE-2025-3047 Path Traversal in AWS SAM CLI allows file copy to build container
When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...
AWS SAM CLI 安全漏洞
AWS SAM CLI is an Amazon Web Services open source CLI tool for building, testing, debugging, and deploying serverless applications using AWS SAM. A security vulnerability exists in AWS SAM CLI that stems from the possibility that symbolic link content could be copied to the local workspace cache...
Sam Spade 1.14 SEH Overflow / DLL Injection
Sam Spade version 1.14 SEH overflow exploit that leverages DLL injection. Exploit Title: Sam Spade 1.14 - SEH Overflow via Arbitrary DLL Injection Date: 14.03.2024 Software Link: https://www.majorgeeks.com/files/details/samspade.html Exploit Author: Ahmet Ümit BAYRAM Tested Version: 1.14 Tested o...
FreeBSD : libcaca -- Multiple vulnerabilities (c10b639c-e51c-11ef-9e76-4ccc6adda413)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c10b639c-e51c-11ef-9e76-4ccc6adda413 advisory. Sam Hocevar reports: Multiple memory leaks and invalid memory accesses: Tenable has extracted...
CVE-2024-51644
Cross-Site Request Forgery CSRF vulnerability in samwilson Addressbook addressbook allows Stored XSS.This issue affects Addressbook: from n/a through = 1.1.3...
TYPO3 Potential Open Redirect via Parsing Differences
Problem Applications that use TYPO3\CMS\Core\Http\Uri to parse externally provided URLs e.g., via a query parameter and validate the host of the parsed URL may be vulnerable to open redirect or SSRF attacks if the URL is used after passing the validation checks. Solution Update to TYPO3 versions...
CVE-2024-12802
SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN User Principal Name and SAM Security Account Manager account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and...
Malicious code in gft-sam-connector (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e518541b06a8fad0288da6a0e31b730a6044da6a63fdfe2d8a471d90aac7655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11983 Malicious code in gft-sam-connector (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e518541b06a8fad0288da6a0e31b730a6044da6a63fdfe2d8a471d90aac7655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-51935
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...
CVE-2024-51644
Cross-Site Request Forgery CSRF vulnerability in samwilson Addressbook addressbook allows Stored XSS.This issue affects Addressbook: from n/a through = 1.1.3...
CVE-2024-51632
CVE-2024-51632: SH Slideshow WordPress plugin
CVE-2024-51644
CVE-2024-51644 — WordPress Addressbook plugin CSRF to Stored XSS Affects WordPress Addressbook plugin versions up to and including 1.1.3. The issue arises from a Cross-Site Request Forgery (CSRF) that enables Stored XSS in the Addressbook component. Public references in the connected docs (PT Sec...
CVE-2024-51935 WordPress Fast Video and Image Display plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...
CVE-2024-51935
CVE-2024-51935 is a DOM-based XSS in the WordPress plugin Fast Video and Image Display (
PT-2024-34788 · Unknown · Sam Wilson Addressbook
Name of the Vulnerable Software and Affected Versions: Sam Wilson Addressbook versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.1.3 and earlier, update to a version that fixes this issue,...
CVE-2024-49670
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Glover Client Power Tools Portal client-power-tools allows Reflected XSS.This issue affects Client Power Tools Portal: from n/a through = 1.9.0...
CVE-2024-49670 WordPress Client Power Tools Portal plugin <= 1.9.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Glover Client Power Tools Portal client-power-tools allows Reflected XSS.This issue affects Client Power Tools Portal: from n/a through = 1.9.0...