PT-2024-25111

Name of the Vulnerable Software and Affected Versions Tencent Libpag version 4.3 Description The issue allows a user to send a crafted image to trigger a buffer overflow, which can lead to remote code execution. Recommendations For Tencent Libpag version 4.3, update to a version that fixes the...

Tencent libpag 安全漏洞

Tencent Libpag is an animation library from Tencent. Tencent Libpag suffers from a buffer overflow vulnerability that can be exploited by an attacker to submit a special request that can crash the application or execute arbitrary code in the application context...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 4 security fixes: 324596281 High CVE-2024-1938: Type Confusion in V8. Reported by 5f46f4ee2e17957ba7b39897fb376be8 on 2024-02-11 323694592 High CVE-2024-1939: Type Confusion in V8. Reported by Bohan Liu @P4nda20371774 of Tencent Security Xuanwu Lab on...

CVE-2024-22873

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery SSRF via the event subscription function /service/subscription.go. This vulnerability allows attackers to access internal requests via a crafted POST request...

Server side request forgery (ssrf)

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery SSRF via the event subscription function /service/subscription.go. This vulnerability allows attackers to access internal requests via a crafted POST request...

Tencent Blueking CMDB Security Vulnerability

Tencent Blueking CMDB is a configuration management database system from Tencent, China. A security vulnerability exists in Tencent Blueking CMDB versions v3.2.x through v3.9.x, which stems from /service/subscription.go contains a server-side request forgery vulnerability that allows an attacker ...

CVE-2024-22873

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery SSRF via the event subscription function /service/subscription.go. This vulnerability allows attackers to access internal requests via a crafted POST request...

CVE-2024-22873

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery SSRF via the event subscription function /service/subscription.go. This vulnerability allows attackers to access internal requests via a crafted POST request...

PT-2024-19593 · Tencent · Tencent Blueking Cmdb

Name of the Vulnerable Software and Affected Versions: Tencent Blueking CMDB versions 3.2.x through 3.9.x Description: The issue is related to Server-Side Request Forgery SSRF via the event subscription function, located at the /service/subscription.go endpoint. This allows attackers to access...

CVE-2024-22873: Server-Side Request Forgery (SSRF)

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery SSRF via the event subscription function /service/subscription.go. This vulnerability allows attackers to access internal requests via a crafted POST request...

CVE-2024-22873

Tencent Blueking CMDB versions v3.2.x through v3.9.x are vulnerable to a Server-Side Request Forgery (SSRF) in the event subscription function located at the /service/subscription.go endpoint. An attacker can exploit this by sending a crafted POST request to access internal requests. To mitigate ...

CVE-2024-22873

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery SSRF via the event subscription function /service/subscription.go. This vulnerability allows attackers to access internal requests via a crafted POST request...

Unspecified vulnerability in Tencent TDSQL (CNVD-2025-06548)

Tencent tdsql is a distributed database from the Chinese company Tencent Tencent. An unspecified vulnerability exists in Tencent TDSQL, which can be exploited by an attacker to discover database information...

CVE-2023-52286

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

Design/Logic Flaw

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

Tencent TDSQL 安全漏洞

Tencent tdsql is a distributed database from the Chinese company Tencent Tencent. An unspecified vulnerability exists in Tencent TDSQL, which can be exploited by an attacker to discover database information...

CVE-2023-52286

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

CVE-2023-52286

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

CVE-2023-52286: Exposure of Sensitive Information to an Unauthorized Actor

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

CVE-2023-52286

CVE-2023-52286 affects Tencent tdsqlpcloud up to version 1.8.5, where an unauthenticated remote attacker can read database credentials via index.php/api/install/get_db_info. The issue is linked to CVE-2023-42387 (TDSQL Chitu). CVSS 3.1 base score 7.5 (CONF: HIGH) with Network access, no user inte...