Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 114, which stems from a site isolation bypass that allows open redirects to data on the site...

RenderDoc 输入验证错误漏洞

RenderDoc is a standalone graphics debugger from the RenderDoc open source. An input validation error vulnerability exists in RenderDoc 1.26 and earlier versions, which stems from allowing integer overflows and causing buffer overflows...

Gradio 输入验证错误漏洞

Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. An input validation error vulnerability exists in Gradio 3.33.1 and earlier versions, which stems from a lack of path filtering, causing Gradio to not properly restrict...

RenderDoc 输入验证错误漏洞

RenderDoc is a standalone graphics debugger from the RenderDoc open source. An input validation error vulnerability exists in RenderDoc 1.26 and earlier versions, which stems from allowing integer overflows and causing buffer overflows...

Canonical Landscape 输入验证错误漏洞

Canonical Landscape is a system administration tool from Canonical UK. A security vulnerability exists in Canonical Landscape that originates from allowing open redirects via URLs...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a corrupted memo in audio when the ADSP sends input during a recording use case...

WordPress Plugin Frontend Post 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

ABB ASPECT 输入验证错误漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. An input validation error vulnerability exists in several ABB products, which stems from a vulnerability that allows an attacker to exploit components of the ASPECT interface to execute remote code...

WordPress Plugin WooSidebars Sidebar Manager Converter 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

Wrong assumption that NFT is not in contract when loan is active

Lines of code Vulnerability details Impact The lender might lose or be robbed of his supplied NFT. Proof of Concept A lender can withdraw the NFT in his lien if it is not currently on loan by calling withdrawNftWithInterest. This is checked by relying on IRC721.safeTransferFrom to revert if the N...

Sprecher Automation SPRECON-E-C/P/T3 输入验证错误漏洞

The Sprecher Automation SPRECON-E-C/P/T3 is an industrial device from Sprecher Automation. The Sprecher Automation SPRECON-E-C/P/T3 suffers from an input validation error vulnerability that stems from faulty firmware validation and can be exploited by an attacker to inject and execute arbitrary...

JetBrains TeamCity 输入验证错误漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. An input validation error vulnerability exists in...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. An input validation error vulnerability exists in the Widevine Trustlet Application versions 5.0.0 through 5.1.1, which stems from the presence of an integer overflow issue that results in a buffer overflow...

VMware Identity Manager 输入验证错误漏洞

VMware Identity Manager is a Workspace One identity and access management component from VMware, Inc. A security vulnerability exists in VMware Workspace ONE Access and VMware Identity Manager, which stems from a mishandling of paths leading to the disclosure of sensitive information...

Apache Sling Input Validation Error Vulnerability

Apache Sling is the United States Apache Apache Foundation of a Java platform for open source Web framework. Designed to comply with JSR-170 content repository such as Apache Jackrabbit to create content-centric applications. An input validation error vulnerability exists in Apache Sling Commons...

ImageMagick 输入验证错误漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert, or write images in a variety of formats. A security vulnerability exists in ImageMagick that stems from undefined conversion behavior in some encoders...

Mattermost 输入验证错误漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an input validation error vulnerability that stems from Mattermost's failure to normalize UTF obfuscated characters when determining whether a preview should be generated for a...

Omni-Notes 安全漏洞

Omni-Notes is an open source notes application for Android. A security vulnerability exists in versions prior to Omni-Notes 6.2.7 that stems from the path to a note attachment not being properly validated, allowing a malicious or compromised application on the same device to cause Omni-notes to...

CraftCMS stored XSS in Quick Post widget error message

Summary The platform does not filter input and encode output in Quick Post validation error message, which can deliver an XSS payload. Details Old CVE fixed the XSS in label HTML but didn’t fix it when clicking save. PoC 1. Login at admin 2. Go to setting 3. Create a Section 4. On Entry page, cli...

LibreOffice 输入验证错误漏洞

LibreOffice is an open source office software suite from The Document Foundation tdf. The product includes the Writer text documents, Calc spreadsheets and Impress presentations applications. A security vulnerability exists in The Document Foundation LibreOffice version 7.4 up to and including...