AMD CPUs 安全漏洞

AMD CPUs is a GPU component from AMD Corporation. AMD CPUs suffers from a security vulnerability that stems from the fact that an attacker can bypass access restrictions to AMD processor data to read sensitive information via Beyond Branch Predictor Selectors...

WPS 安全漏洞

WPS is an application software from the Chinese company WPS. It provides file processing functions A security vulnerability exists in versions prior to WPS Office for Windowsv11.2.0.10258 that stems from not configuring the correct ACLs...

CVE-2022-0442

The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make sure file names for user avatars are unique, allowing a logged in user to overwrite another users avatar...

CVE-2022-0442

The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make sure file names for user avatars are unique, allowing a logged in user to overwrite another users avatar...

CVE-2022-0442

CVE-2022-0442 affects the WordPress plugin UsersWP (versions prior to 1.2.3.1). The issue is a lack of access controls when updating a user avatar and non-unique avatar filenames, enabling a logged-in user to overwrite another user’s avatar. The vulnerability is confirmed across multiple sources ...

PT-2022-13187 · WordPress · Userswp

Name of the Vulnerable Software and Affected Versions: UsersWP WordPress plugin versions prior to 1.2.3.1 Description: The issue is related to missing access controls when updating a user avatar and the lack of unique file names for user avatars. This allows a logged-in user to overwrite another...

Zulip 安全漏洞

Zulip is a powerful open source group chat application from the Zulip team. Used to combine the immediacy of real-time chat with the productivity benefits of threaded conversations, Zulip is vulnerable to an access control error that stems from the presence of incorrect access controls in the...

Linux kernel缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a buffer overflow vulnerability that can be exploited by an attacker to bypass Linux kernel access restrictions and read or modify data via bpf...

golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet

A flaw was found in golang. Extraneous zero characters at the beginning of an IP address octet are not properly considered which could allow an attacker to bypass IP-based access controls. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

libarchive 后置链接漏洞

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive, which can be exploited to modify data via symbolic link pattern timestamps. An attacker can exploit this vulnerability to bypass libarchive's access restrictions...

Security Bulletin: Information disclosure vulnerability affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2021-38900

Summary IBM Business Process Manager and IBM Business Automation Workflow are vulnerable to a information disclosure attack, potentially revealing sensitive information to an administrator. Vulnerability Details CVEID: CVE-2021-38900 DESCRIPTION: IBM Business Process Manager 8.5 and 8.6 and IBM...

UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override

The plugin is missing access controls when updating a user avatar, and does not make sure file names for user avatars are unique, allowing a logged in user to overwrite another users avatar. PoC - Right click the thumbnail of another user and copy the image URL. It will be something like:...

Intel Smart Campus Android App 安全漏洞

Intel Smart Campus Android App is a Smart Campus application from IntelR Corporation. A security vulnerability exists in the IntelR Smart Campus Android application that stems from incorrect access controls in the application that could allow authenticated users to potentially enable information...

CVE-2021-24928 Rearrange Woocommerce Products < 3.0.8 - Subscriber+ SQL Injection

The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the saveallorder AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to an SQL injection, and allowing any authenticated user, such as subscriber, to...

Emerson OSE Improper Permissions, Privileges, and Access Controls (CVE-2013-0692)

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary code by connecting to the debug service. This plugin only work...

PT-2022-9513 · WordPress · Rearrange Woocommerce Products

Name of the Vulnerable Software and Affected Versions: Rearrange Woocommerce Products WordPress plugin versions prior to 3.0.8 Description: The issue is related to improper access controls in the save all order AJAX action and lack of validation and escaping when inserting user data into SQL...

Emerson DeltaV Improper Permissions, Privileges, and Access Controls (CVE-2016-9345)

An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system. This plugin only works with Tenable.ot. Please visit...

Emerson DeltaV Improper Permissions, Privileges, and Access Controls (CVE-2014-2349)

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 allows local users to modify or read configuration files by leveraging engineering-level privileges. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable...

Emerson DeltaV Improper Permissions, Privileges, and Access Controls (CVE-2012-1818)

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors. This plugin only works with Tenable.ot. Please visit...

makeProposal can be front run with an arbitrary proposal modifications, enabling griefing attack

Handle hyh Vulnerability details Impact Griefing attack is possible for makeProposal as proposal details can be modified by anyone. Proposal setters have no access controls, requiring only that proposal be not current, so when makeProposal is executed after the preparation phase an attacker can...