11980 matches found
Solidus 跨站请求伪造漏洞
Solidus is an open source e-commerce system. A cross-site request forgery vulnerability exists in Solidus that stems from a lack of validation in the Add to cart operation. The vulnerability allows a malicious site to add items to a user's shopping cart without the user's knowledge...
MartDevelopers iResturant 跨站脚本漏洞
MartDevelopers iResturant is an open source lightweight restaurant Erp from MartDevelopers Kenya, designed to integrate social restaurant operations into a single system. A cross-site scripting vulnerability exists in version 1.0 of MartDevelopers iRestaurant, which stems from a lack of filtering...
NFTXStakingZap Performs A Dangerous Equality Check Which Can Brick Contract
Handle leastwood Vulnerability details Impact NFTXStakingZap provides an interface for users to interact with NFTX vaults by adding ERC1155/ERC721 tokens as liquidity. The addLiquidity721WETH and addLiquidity1155WETH functions perform strict equality checks on the vaults balance for the...
CVE-2021-45099
The addon.stdin service in addon-ssh aka Home Assistant Community Add-on: SSH & Web Terminal before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against...
Design/Logic Flaw
DISPUTED The addon.stdin service in addon-ssh aka Home Assistant Community Add-on: SSH & Web Terminal before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure...
CVE-2021-45099
The addon.stdin service in addon-ssh aka Home Assistant Community Add-on: SSH & Web Terminal before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against...
CVE-2021-45099
The vulnerability concerns the Home Assistant Community Add-on: SSH & Web Terminal (addon-ssh) prior to version 10.0.0 via the addon.stdin service. Root cause per sources is an attack surface that relies on social engineering; the vendor disputes this as a vulnerability, and addon.stdin was remov...
CVE-2021-45099
The addon.stdin service in addon-ssh aka Home Assistant Community Add-on: SSH & Web Terminal before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against...
Home Assistant 安全漏洞
Home Assistant is an open source home automation management system. The system is primarily used to control home automation devices. A security vulnerability exists in Home Assistant Community Add-on: SSH & Web Terminal versions prior to 10.0.0. There is no information about this vulnerability at...
CVE-2021-45017
Cross Site Request Forgery CSRF vulnerability exits in Catfish =6.1. when you upload an html file containing CSRF on the website that uses a google editor; you can specify the menu url address as your malicious url address in the Add Menu column...
CVE-2021-45017
Cross Site Request Forgery CSRF vulnerability exits in Catfish =6.1. when you upload an html file containing CSRF on the website that uses a google editor; you can specify the menu url address as your malicious url address in the Add Menu column...
CVE-2021-45017
Cross Site Request Forgery CSRF vulnerability exits in Catfish =6.1. when you upload an html file containing CSRF on the website that uses a google editor; you can specify the menu url address as your malicious url address in the Add Menu column...
CVE-2021-45017
Catfish CMS CSRF in
CLSA-2021-1639578644 Fix CVE(s): CVE-2021-43527
SECURITY REGRESSION: Broken SSL connections - debian/patches/CVE-2021-43527.patch: Add missing break statement...
PT-2021-22829 · Unknown · Securitashome
Name of the Vulnerable Software and Affected Versions: SecuritasHome home alarm system version HPGW-G 0.0.2.23F BG U-ITR-F1-BD BL.A30.20181117 Description: The issue concerns the absence of notifications for ongoing RF jamming attacks in the system. This allows an attacker to block legitimate...
Made vesta file contains vulnerabilities
Made vesta is a Made open source application. Made vesta version 0.9.8-24 contains a file inclusion vulnerability, which stems from a lack of filtering and restriction on file references in the web/add/user/index.php file, and can be exploited by attackers to cause file inclusion...
kernel: timer tree corruption leads to missing wakeup and system freeze
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while runnin...
CVE-2021-43693
vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php...