1962 matches found
CVE-2024-42017
creationtimestamp| type| source ---|---|--- 2024-09-30 20:50:31+00:00| seen| https://t.me/cvedetector/6677...
CVE-2024-8465
SQL injection vulnerability, by which an attacker could send a specially designed query through userid parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it...
PHPGurukul Job Portal SQL注入漏洞
PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the userid parameter in /jobportal/admin/user/controller.php...
CVE-2024-43774
SQL Injection in download personal learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the uid parameter...
PT-2024-30646 · Unknown · Easytest Online Test Platform
Name of the Vulnerable Software and Affected Versions: Easytest Online Test Platform versions 24E01 and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in the download personal learning course function. This enables attacker...
Directus has an insecure object reference via PATH presets
Impact Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the POST /presets request but not in the PATCH request. When chained with...
CVE-2024-42906
creationtimestamp| type| source ---|---|--- 2024-08-26 23:00:44+00:00| seen| https://t.me/cvedetector/4202...
CVE-2024-38209
creationtimestamp| type| source ---|---|--- 2024-08-23 02:04:42+00:00| seen| https://t.me/cvedetector/3971...
SUSE CVE-2024-43882
In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via dofilpopen, permission checking is done against the file's metadata at that moment, and on success, a file pointer is passed back. Much...
CVE-2024-8033
creationtimestamp| type| source ---|---|--- 2024-08-22 00:06:52+00:00| seen| https://t.me/cvedetector/3831...
AZL-48495 CVE-2024-43882 affecting package kernel for versions less than 5.15.167.1-1
In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via dofilpopen, permission checking is done against the file's metadata at that moment, and on success, a file pointer is passed back. Much...
UBUNTU-CVE-2024-43882
In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via dofilpopen, permission checking is done against the file's metadata at that moment, and on success, a file pointer is passed back. Much...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a ToCToU issue in the exec component when setting uid/gid...
DEBIAN-CVE-2024-42312
In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize iuid/igid Always initialize iuid/igid inside the sysfs core so setownership can safely skip setting them. Commit 5ec27ec735ba "fs/proc/procsysctl.c: fix the default values of iuid/igid on /proc/sys...
CVE-2024-6760
A logic bug in the code which disables kernel tracing for setuid programs meant that tracing was not disabled when it should have, allowing unprivileged users to trace and inspect the behavior of setuid programs. The bug may be used by an unprivileged user to read the contents of files to which...
CVE-2024-7503 WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.5. This is due to the use of loose comparison of the activation code in the 'wooslgconfirmemailuser' function. This makes it possible for unauthenticated attackers to l...
CVE-2024-33022
creationtimestamp| type| source ---|---|--- 2024-08-05 18:05:25+00:00| seen| https://t.me/cvedetector/2459...
CVE-2024-38481
creationtimestamp| type| source ---|---|--- 2024-08-01 11:14:40+00:00| seen| https://t.me/cvedetector/2225...