CVE-2022-28417: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

Home Owners Collection Management System SQL注入漏洞

Home Owners Collection Management System is a homeowner collection management system. Home Owners Collection Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Home Owners Collection Management System SQL注入漏洞

A SQL injection vulnerability exists in Home Owners Collection Management System v1.0, which originates in /hocms/classes/Master.php The vulnerability is caused by a lack of filtering and escaping of SQL data in ?f=deletephase. An attacker could exploit this vulnerability to cause SQL injection...

CVE-2022-28416: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

Home Owners Collection Management System SQL注入漏洞

Home Owners Collection Management System is a homeowner collection management system. Home Owners Collection Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

PT-2022-19009

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

PT-2022-19007

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

Home Owners Collection Management System SQL注入漏洞

Home Owners Collection Management System is a homeowner collection management system. Home Owners Collection Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

PT-2022-19008

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

PT-2022-19006

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the "/hocms/classes/Master.php?f=delete member" API...

CVE-2022-28414: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...

CVE-2022-28415: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...

museumcollection.winterthur.org Cross Site Scripting vulnerability OBB-2536579

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kernel: fget: check that the fd still exists after getting a ref to it

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close and fget simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on...

kernel: Use After Free in unix_gc() which could result in a local privilege escalation

A vulnerability was found in unixdgramrecvmsg in net/unix/afunix.c in the Linux kernel's garbage collection for Unix domain socket file handlers. In this flaw, a missing cleanup may lead to a use-after-free due to a race problem. This flaw allows a local user to crash the system or escalate their...

kernel: fget: check that the fd still exists after getting a ref to it

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close and fget simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on...

CVE-2021-3681

A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the buildignore list in "galaxy.yml" include files in the .tar.gz file. This contains sensitive info, such as the user's Ansible Galaxy A...

Design/Logic Flaw

A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the buildignore list in "galaxy.yml" include files in the .tar.gz file. This contains sensitive info, such as the user's Ansible Galaxy A...

kernel: Use After Free in unix_gc() which could result in a local privilege escalation

A vulnerability was found in unixdgramrecvmsg in net/unix/afunix.c in the Linux kernel's garbage collection for Unix domain socket file handlers. In this flaw, a missing cleanup may lead to a use-after-free due to a race problem. This flaw allows a local user to crash the system or escalate their...

kernel: Use After Free in unix_gc() which could result in a local privilege escalation

A vulnerability was found in unixdgramrecvmsg in net/unix/afunix.c in the Linux kernel's garbage collection for Unix domain socket file handlers. In this flaw, a missing cleanup may lead to a use-after-free due to a race problem. This flaw allows a local user to crash the system or escalate their...