TPCMS 日志信息泄露漏洞

TPCMS is an open source content management system from the individual developers at Source of Happiness. A security vulnerability exists in TPCMS version 3.2, which can be exploited by an attacker to access the ThinkPHP log directory and obtain sensitive information such as administrator username...

CVE-2022-0350

Cross-site Scripting XSS - Stored in GitHub repository vanessa219/vditor prior to 3.8.13...

CVE-2021-45031

A vulnerability in MEPSAN's USC+ before version 3.0 has a weakness in login function which lets attackers to generate high privileged accounts passwords...

Wyze Labs Wyze Cam 缓冲区错误漏洞

Wyze Labs Wyze Cam is a series of cameras from the US company Wyze Labs. Wyze Labs Wyze Cam has a security vulnerability that stems from a buffer overflow vulnerability in the presence of a stack. An attacker could exploit the vulnerability to run arbitrary code on the affected device. The...

Firmware Analysis and Comparison Tool 跨站请求伪造漏洞

Firmware Analysis and Comparison Tool FACT is a firmware analysis and comparison tool. firmware Analysis and Comparison Tool version v3.2 contains a cross-site request forgery vulnerability that stems from a WEB application that does not adequately validate that the request is from a trusted user...

CVE-2022-25521

NUUO v03.11.00 was discovered to contain access control issue...

CVE-2021-43666

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...

jhead 缓冲区错误漏洞

jhead is a tool for modifying JPEG file information. A buffer error vulnerability exists in jhead version 3.04 and jpgfile.c version 3.05, which stems from a heap-based buffer overflow vulnerability in the RemoveUnknownSections function in jpgfile.c. The vulnerability is caused by a heap-based...

CVE-2021-44345

Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Injection...

PT-2022-12049 · Beijing Wisdom Vision Technology Industry Co. · One Card Integrated Management System

Name of the Vulnerable Software and Affected Versions: Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System version 3.0 Description: The system is susceptible to SQL Injection. Recommendations: For version 3.0, update to a newer version that contains a fix for...

Xbtit 跨站脚本漏洞

Xbtit is a tracker software. A cross-site scripting vulnerability exists in Xbtit version 3.1. The vulnerability occurs when /ajaxchat/sendChatData.php fails to properly validate the value of the "n" POST parameter. An attacker could exploit this vulnerability to execute malicious JavaScript code...

Xbtit SQL注入漏洞

Xbtit is an open source tracker software. version 3.1 of Xbtit is vulnerable to SQL injection, which stems from a missing filter escape for SQL statements in the sid parameter of the ajaxchat/getHistoryChatData.php file. An attacker could exploit this vulnerability to extract sensitive data such ...

Nicotine+安全漏洞

Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Designed to be a pleasant, free and open source FOSS alternative to the official Soulseek client, it provides additional functionality while staying synchronized with the Soulseek protocol. Nicotine+ version 3.0.3 and later A...

UBUNTU-CVE-2022-0890

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...

Microsoft SMBv3 代码注入漏洞

Microsoft SMBv3 is a support firmware from Microsoft Corporation USA that provides SMB functionality for devices. A code injection vulnerability exists in Microsoft SMBv3 Client/Server. The following products and versions are affected: Windows 10 Version 21H1 for x64-based Systems,Windows 10...

CVE-2022-22909

HotelDruid v3.0.3 was discovered to contain a remote code execution RCE vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

CVE-2022-0630

Out-of-bounds Read in Homebrew mruby prior to 3.2...

CVE-2021-46110

Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters...

mruby 缓冲区错误漏洞

mruby is a lightweight implementation of the Ruby language. mruby 3.2 previously had a security vulnerability that stemmed from the use of out-of-range pointer offsets. No detailed vulnerability details are currently available...