CVE-2020-26270

In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer receives an input with zero-length results in a CHECK failure when using the CUDA backend. This can result in a query-of-death vulnerability, via denial of service, if users can control the input to the layer...

SQL Injection Vulnerability in AikCms Backend

AikCms is a lightweight CMS. An SQL injection vulnerability exists in the backend of AikCms. An attacker can exploit this vulnerability to obtain sensitive database information...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a denial-of-service vulnerability that stems from the LSTM GRU layer receiving a zero-length input when using a CUDA backend, which results in a check failure. An...

CVE-2020-8286

Libcurl offers "OCSP stapling" via the CURLOPTSSLVERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-stat...

SUSE SLES12 Security Update : sane-backends (SUSE-SU-2020:3125-1)

This update for sane-backends fixes the following issues : sane-backends version upgrade to 1.0.31 : - sane-backends version upgrade to 1.0.30 fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862, CVE-2020-12863, CVE-2020-12864, CVE-2020-12865, CVE-2020-12866, CVE-2020-12867 bsc1172524 -...

Logic Flaw Vulnerability in OurPHP Backend Administration Interface

OurPHP is an enterprise website builder that incorporates e-commerce features. A logic flaw vulnerability exists in OurPHP's backend management interface, which can be exploited by attackers to modify high-privileged administrator passwords...

U.S. Dept Of Defense: Blind Stored XSS Payload fired at the backend on https://█████████/

Summary: I have just gotten an email notification from my XSSHunter payload that my blind stored XSS has been triggered by an administrator on the █████████ site, in the following URL: javascript https://█████/████ Admin IP address: ████████ User-Agent: █████████ Cookies: javascript ██████...

OPENSUSE-SU-2020:2168-1 Security update for rclone

This update for rclone fixes the following issues: rclone was updated to version 1.53.3: Bug Fixes - Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924 boo1179005 Nick Craig-Wood - Check https://github.com/rclone/passwordcheck for a tool check for weak passwords generated by...

SQL Injection Vulnerability in the Backend of Miku CMS Movie and TV System

Miku CMS Movie & TV System is a movie & TV management system designed for different needs of webmasters. A SQL injection vulnerability exists in the backend of Miku CMS, which can be exploited by attackers to obtain sensitive information from the database...

File upload vulnerability in AikCms backend vi***_ad***.php page

AikCms is a lightweight CMS. A file upload vulnerability exists in the AikCms backend viad.php page, which can be exploited by an attacker to upload a webshell and gain server privileges...

File upload vulnerability in DedeCMSV6 backend fi***_na***_co***.php file

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A file upload vulnerability exists in the DedeCMSV6 backend finaco.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Command execution vulnerability in vaeThink backend Au***.php file

vaeThink is a PHP content management framework built on Layui and tp5. A command execution vulnerability exists in the vaeThink backend Au.php file. An attacker can exploit this vulnerability to gain server privileges...

UNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backend

Impact Any install that has UNEDITABLESCHEMAS and/or UNEDITABLETABLEDESCRIPTIONMATCHRULES set in the front-end, is being impacted. The value of these properties is ignored if set, allowing any user to modify table and column descriptions, even though the properties imply they shouldn't be. Patche...

GHSA-47QG-Q58V-7VRP UNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backend

Impact Any install that has UNEDITABLESCHEMAS and/or UNEDITABLETABLEDESCRIPTIONMATCHRULES set in the front-end, is being impacted. The value of these properties is ignored if set, allowing any user to modify table and column descriptions, even though the properties imply they shouldn't be. Patche...

ThinkAdmin 跨站脚本漏洞

ThinkAdmin is a backend administration framework developed based on the latest ThinkPHP V6 , using the MIT protocol open source. thinkAdmin v1, v6 exists a stored cross-site scripting vulnerability. A remote attacker can use the vulnerability to inject arbitrary Web script or HTML...

Damn-Vulnerable-Bank - Vulnerable Banking Application For Android

Damn Vulnerable Bank Android Application aims to provide an interface for everyone to get a detailed understanding with internals and security aspects of android application. How to Use Application Clone the repository and run the Backend Server as per instructions in the link. We have released t...

SQL Injection Vulnerability in MetInfo Backend of Changsha Mito Information Technology Co.

MetInfo is an open source free CMS building system suitable for enterprise building. Changsha Mito Information Technology Co., Ltd. MetInfo backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

OPENSUSE-SU-2020:2035-1 Security update for rclone

This update for rclone fixes the following issues: rclone was updated to version 1.53.3: Bug Fixes - Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924 boo1179005 Nick Craig-Wood - Check https://github.com/rclone/passwordcheck for a tool check for weak passwords generated by...

Command Execution Vulnerability in Zendo Backend

Zendo is a homegrown open source project management software. A command execution vulnerability exists in the Zendo backend. An attacker can exploit this vulnerability to gain server privileges...

Weak Password Vulnerability in WIFI Industrial Router F5936 at Xiamen Sihsin Communication Technology Co.

WIFI Industrial Router F5936 is industrial grade WIFI router. Weak password vulnerability exists in WIFI Industrial Router F5936 of Xiamen Sihsin Communication Technology Co. An attacker can use the vulnerability to log into the server backend and obtain sensitive information...