5217 matches found
PT-2022-26632 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.1 Description: A memory corruption issue was addressed with improved input validation, allowing an app to potentially execute arbitrary code with kernel privileges. Recommendations: For macOS versions prior to 13.1,...
CVE-2017-20134
A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument sk leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2017-20133
A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...
Ambit Technologies iTech Job Portal Script 授权问题漏洞
Ambit Technologies iTech Job Portal Script is an efficient interactive platform from Ambit Technologies India. One can post their vacancy profile on one side and candidates can post their resume on the other side. Ambit Technologies iTech Job Portal Script version 9.13 suffers from a security...
Ambit Technologies iTech Freelancer Script SQL注入漏洞
Ambit Technologies iTech Freelancer Script is a popular and cost-effective solution from Ambit Technologies India for launching your freelancer website. Ambit Technologies Itech Freelancer Script version 5.13 suffers from a security vulnerability that stems from the presence of unknown...
CVE-2022-20219
creationtimestamp| type| source ---|---|--- 2022-07-13 22:43:07+00:00| seen| https://t.me/cibsecurity/46199...
CVE-2022-28888
creationtimestamp| type| source ---|---|--- 2022-07-13 22:40:10+00:00| seen| https://t.me/cibsecurity/46188...
CVE-2022-33736
A vulnerability has been identified in Opcenter Quality V13.1 All versions V13.1.20220624, Opcenter Quality V13.2 All versions V13.2.20220624. The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing...
CVE-2022-31113
creationtimestamp| type| source ---|---|--- 2022-07-01 20:42:57+00:00| seen| https://t.me/cibsecurity/45495 2023-01-06 18:19:59+00:00| seen| https://t.me/cibsecurity/56049...
CVE-2022-23055
In ERPNext, versions v11.0.0-beta through v13.0.2 are vulnerable to Missing Authorization, in the chat rooms functionality. A low privileged attacker can send a direct message or a group message to any member or group, impersonating themselves as the administrator. The attacker can also read chat...
ERPNext 安全漏洞
ERPNext is an open source enterprise resource planning solution from ERPNext India. A security vulnerability exists in ERPNext versions v11.0.0-beta through v13.0.2, which stems from vulnerability to lack of authorization in chat room functionality, and can be exploited by an attacker to send a...
PT-2022-15815 · Erpnext · Erpnext
Name of the Vulnerable Software and Affected Versions: ERPNext versions v11.0.0-beta through v13.0.2 Description: The issue concerns missing authorization in the chat rooms functionality. A low-privileged attacker can send direct or group messages to any member or group, impersonating themselves ...
Malicious code in 13-pkg-1313 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2710d9c11ac4b066d45fecc52ccae29c4fb84f624e0142210a7b8e0a77da514 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in 13-pkg-13 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11ff8eabd16040bbd151481a728945ea4c50fe74433a661598e30c0d635d26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in scheduler-0-13 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d131b97aab3988f77e132d75ebbf1c80b1d4f4f52f4aa6452dc94e064f8dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2017-20062
A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to...
PT-2022-14366 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a permissions bypass in the deletePackageX function of DeletePackageHelper.java, allowing a Guest user to reset pre-loaded applications for other users. This...
npm CLI 信息泄露漏洞
npm CLI is a package manager from the US company npm. An information disclosure vulnerability exists in the npm CLI npm-packlist version v7.9.0 and v7.13.0, which stems from a runtime omission of the root-level .gitignore and .npmignore file exclusion directives...
Malicious code in discord-js-v13 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efa16d135ce14e2cecb4cc4203b19a8ea5dde2ad02b34a62403aa10036938d20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...