btrfs: subpage: keep TOWRITE tag until folio is cleaned

...

The vulnerability of the Microsoft SQL Server database management system, related to the lack of measures taken for data cleaning at the administrative level, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability in the virtual training environment Moodle, related to the improper elimination of input data during the generation of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability in the virtual training environment Moodle is related to insufficient cleaning of data provided by users in the header of calendar events when they are deleted. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks...

exifcleaner

Cross-platform desktop GUI app to clean image metadata...

The vulnerability of the soapcgi_main() function in the SOAP Service component of the soap.cgi file from the D-Link DIR-852 router’s software, allowing a hacker to execute arbitrary commands.

The vulnerability of the soapcgimain function in the SOAP Service component of the soap.cgi file from the D-Link DIR-852 router’s software lies in the lack of data cleaning measures at the control level when processing the service parameter. Exploiting this vulnerability allows an attacker to...

The vulnerability of the sub_4184C0 function in TOTOLINK X6000R microprogrammed router software allows a hacker to execute arbitrary commands.

The vulnerability of sub4184C0 in the microprogramming software of TOTOLINK X6000R routers lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using a specially created request...

Linux Distros Unpatched Vulnerability : CVE-2022-35410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mat2 aka metadata anonymisation toolkit before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web...

The vulnerability of the Cisco Unified Communications call management web interface, related to the lack of measures taken to clean data at the management level, allows attackers to escalate their privileges and execute arbitrary codes.

The vulnerability of the Cisco Unified Communications call management web interface is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the getenv function in D-Link DIR‑818L router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the getenv function in D-Link DIR-818L router microprogramming systems is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Totolink A3002R router’s microprogramming software, related to the lack of measures taken to clean data at the control level, allows a intruder to execute arbitrary commands.

The vulnerability of TOTOLINK A3002R router microprogramming software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a specially crafted POST request...

The vulnerability of the recvSlaveCloudCheckStatus() function in the microprogramming software for TOTOLINK T8 allows a hacker to execute arbitrary commands.

The vulnerability of the recvSlaveCloudCheckStatus function in the microprogramming software for TOTOLINK T8 routers is related to the lack of measures taken to clean data at the management level when processing the serverIp parameter. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the shell-connect.py file on the software platform for managing network infrastructure, Versa Director, allows a hacker to execute arbitrary commands.

The vulnerability of the shell-connect.py file on the software platform for managing network infrastructure, Versa Director, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands through the...

QuickShare File Server 安全漏洞

QuickShare File Server is a file sharing server software from QuickShare, Inc. A security vulnerability exists in QuickShare File Server version 1.2.1, which stems from an improperly cleaned path to user-supplied files by the FTP service, which could lead to a path traversal attack...

S40 CMS 安全漏洞

S40 CMS is a content management system by Osirys Personal Developers. A security vulnerability exists in S40 CMS version 0.4.2, which stems from improper cleaning of the parameter p in the index.php page handler, which could lead to a path traversal attack...

The vulnerability of the DEVICE_PING command in the monitoring and control software for solar energy systems, Tigo Cloud Connect Advanced (CCA), allows a hacker to gain unauthorized access to protected information, execute arbitrary commands, or cause service interruptions.

The vulnerability of the DEVICEPING command in the monitoring and management tool for solar energy systems, Tigo Cloud Connect Advanced CCA, is related to the lack of data cleaning at the control level during the processing of the final endpoint /cgi-bin/mobileapi. Exploiting this vulnerability c...

The vulnerability of the sub_435E04() function in Netgear JWNR2000v2 software allows a hacker to execute arbitrary commands.

The vulnerability of the sub435E04 function in Netgear JWNR2000v2 microprogrammed software lies in the lack of measures taken to clean data at the control level when processing the host parameter. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

Linux Distros Unpatched Vulnerability : CVE-2023-2828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to...

The vulnerability of microprogrammed access point software for small and medium-sized businesses under HPE Networking Instant On, related to the lack of data cleaning measures at the management level, allows attackers to execute arbitrary commands.

The vulnerability of HPE Networking Instant On’s microprogramming software for small and medium-sized businesses is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Copyparty 跨站脚本漏洞

Copyparty is a portable file server for ed individual developers. A cross-site scripting vulnerability exists in Copyparty 1.18.4 and earlier versions, which stems from improper cleaning of the multimedia tags of music files and could lead to the execution of arbitrary JavaScript code...

The vulnerability of the apcli_do_enr_pbc_wps function in the Netgear RAX5 router’s built-in software allows a hacker to execute arbitrary commands.

The vulnerability of the apclidoenrpbcwps function in Netgear RAX5 router’s built-in software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...