459 matches found
pmix: race condition allows attackers to obtain ownership of arbitrary files
OpenPMIx PMIx is vulnerable to a race condition during execution of library code with UID 0, which allows attackers to obtain ownership of arbitrary files...
SUSE CVE-2024-26822
In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automounting otherwise they'll end up reusing the...
CVE-2024-30938
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...
CVE-2023-44091
creationtimestamp| type| source ---|---|--- 2024-03-19 18:26:50+00:00| seen| https://t.me/ctinow/211802...
CVE-2019-5064
creationtimestamp| type| source ---|---|--- 2024-03-19 12:11:08+00:00| seen| https://t.me/ctinow/211391 2024-10-14 21:44:46+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/508...
Employee Task Management System SQL Injection Vulnerability
Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the parameter userid that can result in an sql injection...
GHSA-3J27-563V-28WF
creationtimestamp| type| source ---|---|--- 2024-03-06 18:16:34+00:00| seen| https://t.me/ctinow/201597...
GHSA-RV4H-M4WC-V99W
creationtimestamp| type| source ---|---|--- 2024-03-01 21:21:46+00:00| seen| https://t.me/ctinow/197995...
GHSA-3HRR-XWVG-HXVR
creationtimestamp| type| source ---|---|--- 2024-02-29 21:26:58+00:00| seen| https://t.me/ctinow/197022...
RHSA-2024:1017
creationtimestamp| type| source ---|---|--- 2024-02-28 13:17:07+00:00| seen| https://t.me/ctinow/195404...
GHSA-5JJQ-8CVJ-V6M9
creationtimestamp| type| source ---|---|--- 2024-02-21 01:06:49+00:00| seen| https://t.me/ctinow/189064 2024-02-21 13:05:31+00:00| published-proof-of-concept| https://t.me/arpsyndicate/3753...
Open-Xchange App Suite Security Vulnerability
Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite that stems from a user ID reference not properly cleaned up as mentioned in the documentation notes, where script code could be injected...
GHSA-RQ95-XF66-J689
creationtimestamp| type| source ---|---|--- 2024-02-01 00:36:13+00:00| seen| https://t.me/ctinow/177221...
RHSA-2024:0489
creationtimestamp| type| source ---|---|--- 2024-01-31 18:16:40+00:00| seen| https://t.me/ctinow/176942...
CVE-2024-0988
A vulnerability classified as critical was found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this vulnerability is the function checklogin of the file /application/index/common.php. The manipulation of the argument AppUserid/AppuserToken leads to improper authentication. The explo...
CVE-2023-28900 Nickname Disclosure on the Backend Automotive Server
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number...
Omniauth::MicrosoftGraph Account takeover (nOAuth)
Summary The implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases when the email is used as a trusted user identifier...
CVE-2024-21632 omniauth-microsoft_graph vulnerable to account takeover (nOAuth)
omniauth-microsoftgraph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases...