14696 matches found
GHSA-FMF5-J5J9-99PP OS Command Injection in pulverizr
pulverizr through 0.7.0 allows execution of arbitrary commands. Within lib/job.js, the variable filename can be controlled by the attacker. This function uses the variable "filename" to construct the argument of the exec call without any sanitization. In order to successfully exploit this...
GHSA-F8FH-8RGM-227H OS Command Injection in node-prompt-here
node-prompt-here through 1.0.1 allows execution of arbitrary commands. The runCommand is called by getDevices function in file linux/manager.js, which is required by the index. process.env.NMCLI in the file linux/manager.js. This function is used to construct the argument of function execSync,...
Design/Logic Flaw
Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructur...
SVGlib Vulnerable to XXE Attacks
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
CVE-2021-24243
An AJAX action registered by the WPBakery Page Builder Visual Composer Clipboard WordPress plugin before 4.5.6 did not have capability checks nor sanitization, allowing low privilege users subscriber+ to call it and set XSS payloads, which will be triggered in all backend pages...
Integer overflow in CipherUpdate
Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...
Use of transfer() may lead to failures
Handle 0xRajeev Vulnerability details Impact Although transfer and send have been recommended as a security best-practice to prevent reentrancy attacks because they only forward 2300 gas, the gas repricing of opcodes such as with EIP-2929 in the recent Berlin fork may break deployed contracts...
Anyone Can Call Init() and Lock It Forever For Attack.sol, DAO.sol, Factory.sol, Pools.sol, Router.sol, Vault.sol, and Vader.sol
Handle jvaqa Vulnerability details Impact Anyone Can Call Init and Lock It Forever For Attack.sol, DAO.sol, Factory.sol, Pools.sol, Router.sol, Vault.sol, and Vader.sol When trying to deploy vader contracts, an attacker could call init on each deployed contract and lock it, wasting the deployer's...
The vulnerability affects the runtime of procedure calls in Microsoft Windows operating systems, allowing an attacker to execute arbitrary code.
The vulnerability of remote procedure call runtime in Microsoft Windows operating systems is related to improper code generation management. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code remotely...
Lenovo Pcmanager 代码问题漏洞
Lenovo Pcmanager is a software from Lenovo, China, that provides comprehensive management of Pc devices. A code issue vulnerability exists in Lenovo PCManager prior to version 3.0.400.3252, which stems from an incorrect programmatic call to an advanced local procedure that can be exploited by an...
The vulnerability affects the runtime of procedure calls in Microsoft Windows operating systems, allowing an attacker to execute arbitrary code.
The vulnerability of remote procedure call runtime in Microsoft Windows operating systems is related to improper code generation management. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability affects the runtime of procedure calls in Microsoft Windows operating systems, allowing an attacker to execute arbitrary code.
The vulnerability of remote procedure call runtime in Microsoft Windows operating systems is related to errors in code generation control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability affects the runtime of procedure calls in Microsoft Windows operating systems, allowing an attacker to execute arbitrary code.
The vulnerability of remote procedure call runtime in Microsoft Windows operating systems is related to improper code generation management. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability affects the runtime of procedure calls in Microsoft Windows operating systems, allowing an attacker to execute arbitrary code.
The vulnerability of remote procedure call runtime in Microsoft Windows operating systems is related to improper code generation management. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the RPC Endpoint Mapper service on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the RPC Endpoint Mapper service on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection
The requestlistrequest AJAX call of the plugin, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the orderid POST parameter before using it in a SQL statement, leading to a SQL Injection issue. PoC curl 'https://example.com/wp-admin/admin-ajax.php' ...
PT-2024-11069 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0 Description: The vulnerability occurs when the sys read function is traced by kprobe, leading to a kernel panic. The execution of sys read hits a BUG ON in find get block after installing kprobe at sys...
Cross site request forgery (csrf)
Sipwise C5 NGCP wwwcsc version 3.6.4 up to and including platform NGCP CE mr3.8.13 allows call/click2dial CSRF attacks for actions with administrative privileges...
PYSEC-2021-56
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff...