187 matches found
CVE-2025-23970: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in aonetheme Service Finder Booking sf-booking allows Privilege Escalation.This issue affects Service Finder Booking: from n/a through = 6.1...
SUSE CVE-2022-50145
In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: Add multithread support for a DMA channel When we get a DMA channel and try to use it in multiple threads it will cause oops and hanging the system. % echo 64 /sys/module/dmatest/parameters/threadsperchan % ec...
DEBIAN-CVE-2022-50145
In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: Add multithread support for a DMA channel When we get a DMA channel and try to use it in multiple threads it will cause oops and hanging the system. % echo 64 /sys/module/dmatest/parameters/threadsperchan % ec...
UBUNTU-CVE-2022-50145
In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: Add multithread support for a DMA channel When we get a DMA channel and try to use it in multiple threads it will cause oops and hanging the system. % echo 64 /sys/module/dmatest/parameters/threadsperchan % ec...
CVE-2022-50145: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: Add multithread support for a DMA channel When we get a DMA channel and try to use it in multiple threads it will cause oops and hanging the system. % echo 64 /sys/module/dmatest/parameters/threadsperchan % ec...
The vulnerabilities of the s390/cpum_sf components of the Linux operating system’s kernel allow attackers to cause service failures.
The vulnerability of the s390/cpumsf components in Linux operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
Malicious code in @sf-intl-map/pc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a2d90c24241bf2e76297e783ea1e7b7672cae9934a46ce92fc661a72786973 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sf-intl-sn-prod (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4cc33212e001bc0af0440f49eb0c52cdc0ad223eba555c5cb2afaa9931e5c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: SCTP: Proper validation of chunk size in sctpsfootb was added. A size validation fix, similar to that in Commit 50619dbf8db7 “SCTP: Add size validation when processing chunks”, is also required in sctpsfootb to address a crash...
DEBIAN-CVE-2024-57849
In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHPAPPERFS390SFONLINE -- s390pmusfofflinecpu ... CPUHPAPPERFONLINE -- perfeventexitcpu The s390...
PT-2025-3595
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue arises from the handling of CPU hotplug removal during sampling in the Linux kernel. When a CPU is removed, the s390 pmu sf offline cpu function is called, which deallocates sampling...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a mutual exclusion lock protection issue with SDB memory allocation in the s390/cpumsf subsystem...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from faulty block size validation in the sctpsfootb function. No details of the vulnerability are provided at thi...
CVE-2024-9925
SQL injection vulnerability in TAI Smart Factory's QPLANT SF version 1.0. Exploitation of this vulnerability could allow a remote attacker to retrieve all database information by sending a specially crafted SQL query to the ‘email’ parameter on the ‘RequestPasswordChange’ endpoint...
CVE-2024-9925
CVE-2024-9925 describes a SQL injection in QPLANT SF 1.0 by TAI Smart Factory. The vulnerability allows a remote attacker to exfiltrate all database information by crafting a SQL payload against the email parameter on the RequestPasswordChange endpoint. Impact is high (confidentiality, integrity,...
CVE-2024-9925 SQL injection in QPLANT by TAI Smart Factory
SQL injection vulnerability in TAI Smart Factory's QPLANT SF version 1.0. Exploitation of this vulnerability could allow a remote attacker to retrieve all database information by sending a specially crafted SQL query to the ‘email’ parameter on the ‘RequestPasswordChange’ endpoint...
CVE-2024-9925: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in TAI Smart Factory's QPLANT SF version 1.0. Exploitation of this vulnerability could allow a remote attacker to retrieve all database information by sending a specially crafted SQL query to the ‘email’ parameter on the ‘RequestPasswordChange’ endpoint...
TAI Smart Factory QPLANT SF SQL注入漏洞
TAI Smart Factory QPLANT SF is a tool for managing and controlling production execution from TAI Smart Factory, Inc. A SQL injection vulnerability exists in TAI Smart Factory QPLANT SF version 1.0, which originates from allowing a remote attacker to retrieve all database information by sending a...
PT-2024-39940 · Qplant Sf · Qplant Sf
Name of the Vulnerable Software and Affected Versions: QPLANT SF version 1.0 Description: The issue is related to a SQL injection vulnerability. Exploitation of this vulnerability could allow a remote attacker to retrieve all database information by sending a specially crafted SQL query to the...