CVE-2023-51479

Improper Privilege Management vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Build App Online: from n/a through 1.0.19...

CVE-2023-51479 WordPress Build App Online plugin <= 1.0.19 - Authenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Build App Online: from n/a through 1.0.19...

CVE-2023-51479 WordPress Build App Online plugin <= 1.0.19 - Authenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Build App Online: from n/a through 1.0.19...

PT-2024-14138 · Unknown · Abdul Hakeem Build App Online

Name of the Vulnerable Software and Affected Versions: Abdul Hakeem Build App Online versions 1.0.19 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in Abdul Hakeem Build App Online. Recommendations: For versions 1.0.19 and earlier,...

WordPress plugin Build App Online 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

buildah: full container escape at build time

A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation ...

Intel Consolidated Build Infrastructure 安全漏洞

Intel Consolidated Build Infrastructure is a comprehensive build infrastructure from Intel Corporation USA. A security vulnerability previously existed in Intel Consolidated Build Infrastructure version 2.1.10300, which stemmed from an improper access control issue. It could allow authenticated...

Intel Consolidated Build Infrastructure 安全漏洞

Intel Consolidated Build Infrastructure is a comprehensive build infrastructure from Intel Corporation. A security vulnerability previously existed in Intel Consolidated Build Infrastructure version 1.1.0, which stemmed from an incorrect input validation issue. It could allow an authenticated use...

Intel Consolidated Build Infrastructure 安全漏洞

Intel Consolidated Build Infrastructure is a comprehensive build infrastructure from Intel Corporation USA. A security vulnerability previously existed in Intel Consolidated Build Infrastructure version 2.1.10300, which stemmed from an uncontrolled search path issue. It could allow an authenticat...

GHSA-F6MM-5FC7-3G3C goreleaser shows environment by default

Summary Since 4787 the log output is printed on the INFO level, while previously it was logged on DEBUG. This means if the go build output is non-empty, goreleaser leaks the environment. PoC Create a Go project with dependencies, do not pull them yet or run goreleaser later in a container, or...

goreleaser shows environment by default

Summary Since 4787 the log output is printed on the INFO level, while previously it was logged on DEBUG. This means if the go build output is non-empty, goreleaser leaks the environment. PoC Create a Go project with dependencies, do not pull them yet or run goreleaser later in a container, or...

CVE-2024-34213

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function...

Description of the security update for Office Online Server: May 14, 2024 (KB5002503)

None None...

Description of the security update for SharePoint Server Subscription Edition: May 14, 2024 (KB5002599)

None None...

PT-2024-21370 · Evertz Microsystems · Mvip-Ii +4

Name of the Vulnerable Software and Affected Versions: Evertz microsystems MViP-II Firmware version 8.6.5 Evertz microsystems XPS-EDGE- Build 1467 Evertz microsystems evEDGE-EO- Build 0029 Evertz microsystems MMA10G- Build 0498 Evertz microsystems 570IPG-X19-10G Build 0691 Description: The issue...

RHCOS 4 : OpenShift Container Platform 4.15.12 (RHSA-2024:2669)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2669 advisory. - buildah: full container escape at build time CVE-2024-1753 - cri-o: Arbitrary command injection via pod annotation CVE-2024-3154 -...

RHCOS 4 : OpenShift Container Platform 4.14.24 (RHSA-2024:2672)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2672 advisory. - golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-45288 - buildah: full container escape ...

buildah: full container escape at build time

A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation ...

1Panel arbitrary file write vulnerability

Summary There are many command injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. We can use the following mirror configuration write symbol to achieve arbitrary file writing PoC Dockerfile FROM bash:latest COPY...

buildah: full container escape at build time

A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation ...