Authd 安全漏洞

Authd is a cloud-based authentication daemon for identity providers in the Ubuntu open source. A security vulnerability exists in Authd versions prior to 0.3.6 that stems from insufficient randomization of user IDs to prevent conflicts, allowing a local attacker with a registered username to spoo...

CVE-2023-26770

TaskCafe 0.3.2 lacks validation in the Cookie value. Any unauthenticated attacker who knows a registered UserID can change the password of that user...

PT-2024-12113 · Taskcafe · Taskcafe

Name of the Vulnerable Software and Affected Versions: TaskCafe version 0.3.2 Description: The issue is related to a lack of validation in the Cookie value, which allows an unauthenticated attacker who knows a registered UserID to change the password of that user. This can be exploited by attacke...

CVE-2024-9023

creationtimestamp| type| source ---|---|--- 2024-09-28 05:17:07+00:00| seen| https://t.me/cvedetector/6590...

CVE-2024-8428

The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 2.0.2 via the submitformhandler due to missing validation on the 'userid' user controlled key. This makes it possible...

CVE-2024-44808

creationtimestamp| type| source ---|---|--- 2024-09-04 19:25:25+00:00| seen| https://t.me/cvedetector/4807...

CVE-2024-43772

SQL Injection in download student learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the uid parameter...

Huachu Digital Easytest Online Test Platform 安全漏洞

Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version 24E01 and earlier, which stems from improper handling of the uid parameter and could allow a remote attacker to...

CVE-2024-43356

creationtimestamp| type| source ---|---|--- 2024-08-26 23:50:52+00:00| seen| https://t.me/cvedetector/4206...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to always initialize iuid/igid...

CVE-2024-7669

creationtimestamp| type| source ---|---|--- 2024-08-12 15:56:18+00:00| seen| https://t.me/cvedetector/2833...

CVE-2023-42957

creationtimestamp| type| source ---|---|--- 2024-07-29 23:50:09+00:00| seen| https://t.me/cvedetector/1930 2025-03-19 21:18:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8160...

CVE-2024-6520

creationtimestamp| type| source ---|---|--- 2024-07-27 14:57:09+00:00| seen| https://t.me/cvedetector/1754...

CVE-2024-40516

creationtimestamp| type| source ---|---|--- 2024-07-16 22:08:26+00:00| seen| https://t.me/cvedetector/992...

PT-2024-37620 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.5.x through 9.5.5 Mattermost versions 9.6.x through 9.6.2 Mattermost versions 9.7.x through 9.7.4 Mattermost version 9.8.0 Description: The issue allows an attacker to specify both a remoteId and the user ID when creatin...

CVE-2024-23710

In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

pmix: race condition allows attackers to obtain ownership of arbitrary files

OpenPMIx PMIx is vulnerable to a race condition during execution of library code with UID 0, which allows attackers to obtain ownership of arbitrary files...

SUSE CVE-2024-26822

In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automounting otherwise they'll end up reusing the...

CVE-2024-30938

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...

CVE-2023-44091

creationtimestamp| type| source ---|---|--- 2024-03-19 18:26:50+00:00| seen| https://t.me/ctinow/211802...