450 matches found
CVE-2024-44808
creationtimestamp| type| source ---|---|--- 2024-09-04 19:25:25+00:00| seen| https://t.me/cvedetector/4807...
CVE-2024-43772
SQL Injection in download student learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the uid parameter...
Huachu Digital Easytest Online Test Platform 安全漏洞
Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version 24E01 and earlier, which stems from improper handling of the uid parameter and could allow a remote attacker to...
CVE-2024-43356
creationtimestamp| type| source ---|---|--- 2024-08-26 23:50:52+00:00| seen| https://t.me/cvedetector/4206...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to always initialize iuid/igid...
CVE-2024-7669
creationtimestamp| type| source ---|---|--- 2024-08-12 15:56:18+00:00| seen| https://t.me/cvedetector/2833...
CVE-2023-42957
creationtimestamp| type| source ---|---|--- 2024-07-29 23:50:09+00:00| seen| https://t.me/cvedetector/1930 2025-03-19 21:18:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8160...
CVE-2024-6520
creationtimestamp| type| source ---|---|--- 2024-07-27 14:57:09+00:00| seen| https://t.me/cvedetector/1754...
CVE-2024-40516
creationtimestamp| type| source ---|---|--- 2024-07-16 22:08:26+00:00| seen| https://t.me/cvedetector/992...
PT-2024-37620 · Mattermost · Mattermost
Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.5.x through 9.5.5 Mattermost versions 9.6.x through 9.6.2 Mattermost versions 9.7.x through 9.7.4 Mattermost version 9.8.0 Description: The issue allows an attacker to specify both a remoteId and the user ID when creatin...
CVE-2024-23710
In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...
pmix: race condition allows attackers to obtain ownership of arbitrary files
OpenPMIx PMIx is vulnerable to a race condition during execution of library code with UID 0, which allows attackers to obtain ownership of arbitrary files...
SUSE CVE-2024-26822
In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automounting otherwise they'll end up reusing the...
CVE-2024-30938
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...
CVE-2023-44091
creationtimestamp| type| source ---|---|--- 2024-03-19 18:26:50+00:00| seen| https://t.me/ctinow/211802...
CVE-2019-5064
creationtimestamp| type| source ---|---|--- 2024-03-19 12:11:08+00:00| seen| https://t.me/ctinow/211391 2024-10-14 21:44:46+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/508...
Employee Task Management System SQL Injection Vulnerability
Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the parameter userid that can result in an sql injection...
GHSA-3J27-563V-28WF
creationtimestamp| type| source ---|---|--- 2024-03-06 18:16:34+00:00| seen| https://t.me/ctinow/201597...