kernel: s390/qeth: Fix kernel panic after setting hsuid

A flaw was found in the Linux kernel's s390/qeth component. A local attacker with privileges to manage network devices could trigger a kernel panic by setting the hsuid attribute on an IQD Layer3 device while its network interface is active. This occurs because the kernel attempts to execute a nu...

Job Recruitment 注入漏洞

Job Recruitment is a job portal project developed by code-projects using PHP, CSS, JavaScript, and MySQL technologies. An injection vulnerability exists in Job Recruitment version 1.0, which stems from an SQL injection vulnerability in the userid parameter of the admin.php page...

PT-2024-34521 · Snipe-It · Snipe-It

Name of the Vulnerable Software and Affected Versions: Snipe-IT version 7.0.13 Description: A Stored Cross-Site Scripting XSS issue allows an attacker to upload a malicious XML file containing JavaScript code, potentially leading to privilege escalation when the payload is executed. This could...

CVE-2024-51018

creationtimestamp| type| source ---|---|--- 2024-11-05 17:13:18+00:00| seen| https://t.me/cvedetector/9887...

CVE-2024-51526

creationtimestamp| type| source ---|---|--- 2024-11-05 12:11:23+00:00| seen| https://t.me/cvedetector/9843 2026-07-20 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr3thhmdwy2c...

Brokerage Wave 安全漏洞

Brokerage Wave is a frontend product from Brokerage, Inc. A security vulnerability exists in Brokerage Wave version 2.0, which stems from a lack of authorization checking on certain API endpoints, which could allow a remote attacker to manipulate the parameter userid via the API request URL to...

Code-Projects Restaurant Order System SQL注入漏洞

Code-Projects Restaurant Order System is a Code-Projects open source restaurant order system. Code-Projects Restaurant Order System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter uid in the file /login.php that can lead to SQL injection...

PT-2024-16496 · Unknown · Code-Projects Restaurant Order System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Order System version 1.0 Description: A critical issue was found in the code-projects Restaurant Order System, affecting some unknown functionality of the file /login.php. The manipulation of the uid argument leads to...

SUSE CVE-2024-9312

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges...

Exploit for CVE-2024-48217

CVE-2024-48217 Sismart Vulnerability ---------------------------...

CVE-2022-30358

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters. Authentication is required...

CVE-2022-30361

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, roles, user type, license type, and personal detai...

CVE-2022-30355

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required...

CVE-2022-30354

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers...

CVE-2024-10341

creationtimestamp| type| source ---|---|--- 2024-10-25 11:13:50+00:00| seen| https://t.me/cvedetector/8910...

OvalEdge 安全漏洞

OvalEdge is a solution from US-based OvalEdge that helps users create, manage and use data from a variety of sources through AI and human intelligence. A security vulnerability exists in OvalEdge version 5.2.8.0 and earlier, which stems from a POST request to /profile/updateProfile via the userId...

CVE-2022-30354

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers...

CVE-2022-30354

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers...

CVE-2022-30354

OvalEdge versions 5.2.8.0 and earlier are vulnerable to Sensitive Data Exposure via a GET request to the /user/getUserWithTeam endpoint. This vulnerability requires authentication and allows for the disclosure of sensitive information associated with all registered user ID numbers . While no spec...

CVE-2022-30354: Incorrect Permission Assignment for Critical Resource

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers...