2012 matches found
Xbtit SQL注入漏洞
Xbtit is an open source tracker software. version 3.1 of Xbtit is vulnerable to SQL injection, which stems from a missing filter escape for SQL statements in the sid parameter of the ajaxchat/getHistoryChatData.php file. An attacker could exploit this vulnerability to extract sensitive data such ...
CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...
CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...
CVE-2020-25721
Samba AD DC is affected by CVE-2020-25721, where Kerberos acceptors could obtain a stable AD identifier (SID and samAccountName) in issued tickets. This concerns Samba used as an AD DC on Linux; the root issue is Samba not providing reliable SID information in Kerberos tickets. Exploitation conte...
CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. An infinite loop vulnerability exists in gpac in the gflog function, which causes a Denial of Service...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. A null pointer dereference vulnerability exists in gpac in the gfnodegettag function, which causes a segmentation fault and application crash...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. There is a heap-based buffer overflow in the function gprtpbuilderdotx3g function in ietf/rtppck3gpp.c, as demonstrated by MP4Box. This can cause a denial of service DOS...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. The trakboxsize function in GPAC allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. The gfhinterfinalize function allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. A Null Pointer Dereference vulnerability exitgs in GPAC in MP4Box via strlenavx2, which causes a Denial of Service...
Heap Buffer Overflow
mujs:sid is vulnerable to heap buffer overflow. The vulnerability is caused by conflicting JumpList of nested try/finally statements...
NULL Pointer Dereference
gpac:sid is vulnerable to null pointer dereference. The vulnerability exists in gpac in the lsrreadid.part function, which causes a segmentation fault and application crash...
Improper Verification Of Signature
libreoffice:sid is vulnerable to Improper Verification of Cryptographic Signature. The vulnerability is manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to contain both X509Data and KeyValue children of the KeyInfo tag. When opened, it causes LibreOffice t...
Out-of-bounds Memory Access
chromium:sid is vulnerable to out of bounds memory access. The vulnerability exist in A.scad file with no trailing newline allowing an out-of-bounds read during parsing of annotations...
SpoolFool
This is a code analysis of the AddUser repository. Classification: Exploit module/toolkit targeting Windows systems. Primary CVE ID: Not explicitly stated, but the code appears to be related to the exploitation of a vulnerability in the Windows NetAPI32 library. Target product/service: Windows...
CVE-2021-46308
An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter...
PT-2022-12631
Name of the Vulnerable Software and Affected Versions Sourcecodester Online Railway Reservation Sysytem version 1.0 Description An SQL Injection issue exists via the sid parameter. This allows for potential exploitation. Recommendations For Sourcecodester Online Railway Reservation Sysytem versio...
CVE-2021-46308: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter...