OpenRazer 缓冲区错误漏洞

OpenRazer is an open source driver and userspace daemon. It is used to control Razer lighting and other features on GNU/Linux. A buffer error vulnerability exists in OpenRazer versions prior to v3.5.1, which can be exploited by an attacker to disclose the stack address of razerattrreaddpistages,...

WordPress plugin 404s 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Teamamaze Amazefilemanager Command Injection Vulnerability

Teamamaze Amazefilemanager is a file manager app for Android devices by Teamamaze team. A command injection vulnerability exists in Amazefilemanager. The vulnerability can be exploited to gain root privileges by injecting shell meta commands into symbolic links. The following products and version...

Documize Cross-Site Scripting Vulnerability

Documize is an open source document collaboration system built on Golang and EmberJS. A cross-site scripting vulnerability exists in the domain/section/markdown/markdown.go file in Documize versions prior to 3.5.1. The vulnerability stems from the lack of proper validation of client-side data by...