7611 matches found
_squeezeDrips() passed the amount argument in place of amtPerSec for the _addDeltaRange, causing either underflow or the sender losing lots of fund!
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. squeezeDrips passes the amount argument in place of amtPerSec for its callee addDeltaRange in the following line addDeltaRangestate, cycleStart, cycleStart + 1, -int256amt AMTPERSECMULTIPLIER; The last...
PT-2023-10004 · Unknown · Fanzila Webfinance
Name of the Vulnerable Software and Affected Versions: fanzila WebFinance version 0.5 Description: A critical issue has been found in the file htdocs/admin/save Contract Signer Role.php, where the manipulation of the argument n/v leads to sql injection. Recommendations: Apply the patch identified...
CVE-2023-23082
A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument...
CVE-2023-0649 dst-admin sendBroadcast command injection
A vulnerability has been found in dst-admin 1.5.0 and classified as critical. This vulnerability affects unknown code of the file /home/sendBroadcast. The manipulation of the argument message leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the...
PT-2023-16424 · Dst-Admin · Dst-Admin
Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /home/kickPlayer. The manipulation of the userId argument leads to command injection. The attack can be...
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Overview Affected versions of this package are vulnerable to Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function. PoC javascript const clone =...
UBUNTU-CVE-2022-37705
A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the...
[SECURITY] [DLA 3290-1] libzen security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3290-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 29, 2023 https://wiki.debian.org/LTS -...
PT-2023-10341 · Unknown · Mosbth Cimage
Name of the Vulnerable Software and Affected Versions: mosbth cimage versions up to 0.7.18 Description: A vulnerability was found in mosbth cimage, affecting an unknown functionality of the file check system.php. The manipulation of the argument $ SERVER'SERVER SOFTWARE' leads to cross site...
CVE-2021-4315
The CVE-2021-4315 issue affects NYUCCL psiTurk up to 3.2.0, with the flaw located in psiturk/experiment.py. The vulnerability arises from improper neutralization of special elements used in a template engine when the mode argument is manipulated. Public disclosure of the exploit is noted, and upg...
Argument Injection
phpxmlrpc/phpxmlrpc is vulnerable to Argument Injection. The vulnerability exists in multiple functions of Client.php and Wrapper.php due to improper neutralization of argument delimiters which allows an attacker to access the local file or connect to undesired URLs instead of the intended target...
sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API
An array-bounds overflow vulnerability was discovered in SQLite. The vulnerability occurs when handling an overly large input passed as a string argument to some of the C-language APIs provided by SQLite. This flaw allows a remote attacker to pass specially crafted large input to the application...
HackerOne: Private information exposed through GraphQL search endpoints aggregates
Private information could be exposed through the aggs argument on the search and opportunitiessearch endpoints on the GraphQL root node, allowing for the potential exposure of private program handles and other data that can be aggregated...
PT-2023-10247 · Danynab · Movify-J
Name of the Vulnerable Software and Affected Versions: danynab movify-j affected versions not specified Description: A critical vulnerability was found in danynab movify-j, affecting the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument...
PT-2023-11822 · Unknown · Geni Portal
Name of the Vulnerable Software and Affected Versions: GENI Portal affected versions not specified Description: A problematic issue was found in GENI Portal, affecting some unknown functionality of the file portal/www/portal/error-text.php. The manipulation of the error argument leads to cross-si...
Cross site scripting
A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. The manipulation of the argument lang leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named...
PT-2023-10237 · Unknown · Wikisource Category Browser
Name of the Vulnerable Software and Affected Versions: Wikisource Category Browser affected versions not specified Description: A vulnerability was found in Wikisource Category Browser, affecting an unknown part of the file index.php. The manipulation of the lang argument leads to cross-site...
PT-2023-10242 · Unknown · Theradsystem
Name of the Vulnerable Software and Affected Versions: saemorris TheRadSystem affected versions not specified Description: A critical issue was found in saemorris TheRadSystem, affecting the redirect function of the login.php file. The manipulation of the user/pass argument leads to SQL injection...
Cross site scripting
A vulnerability was found in saemorris TheRadSystem. It has been classified as problematic. Affected is an unknown function of the file users.php. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. VDB-218454 is the identifier assigned ...
