501 matches found
Input validation
An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard page, users can create a script to inject XSS. Input validation was missing during creation of a scheduled task. For an external attacker, it is very difficult to exploit this,...
CVE-2023-20688
creationtimestamp| type| source ---|---|--- 2023-04-06 22:27:34+00:00| seen| https://t.me/cibsecurity/61599...
The vulnerability of the OneDrive file sharing service, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of the OneDrive for Windows file sharing service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. This allows a malicious actor to gain unauthorized access to protected information or cause service failures.
The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...
The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...
SUSE CVE-2016-1635
extensions/renderer/renderframeobservernatives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecifie...
SUSE CVE-2019-1010025
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthreadcreated thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability...
CVE-2021-37317
creationtimestamp| type| source ---|---|--- 2023-02-03 20:25:48+00:00| seen| https://t.me/cibsecurity/57494...
UBUNTU-CVE-2023-22725
GLPI is a Free Asset and IT Management Software package. Versions 0.6.0 and above, prior to 10.0.6 are vulnerable to Cross-site Scripting. This vulnerability allow for an administrator to create a malicious external link. This issue is patched in 10.0.6...
NetChess 2.1 Buffer Overflow Exploit
Exploit Title: NetChess2.1 Buffer Overflow SEH Exploit Author: Ugur Eminli Vendor Homepage: https://sourceforge.net/projects/avmnetchess/ Software Link: https://sourceforge.net/projects/avmnetchess/ Version: 2.1 Tested on: WinXP SP2 Build 2600 !/usr/bin/perl my $file= "exploit.pgn"; my $junk=...
kadunapark.com.au Cross Site Scripting vulnerability OBB-3095683
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the Microsoft.NET Framework, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft.NET Framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Azure RTOS GUIX Studio development environment, due to insufficient testing of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the Azure RTOS GUIX Studio development environment exists due to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...
laomao.website Cross Site Scripting vulnerability OBB-3069998
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.
The vulnerability of the Windows Graphics component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information by using a specially created file...
Cashier Queuing System 安全漏洞
Cashier Queuing System is a cashier queuing system by Carlo Montero Personal Developer. A security vulnerability exists in Cashier Queuing System version 1.0, which stems from some unknown processing of user-created handlers being affected, potentially leading to a cross-site scripting attack...
CVE-2022-35295
In SAP Host Agent SAPOSCOL - version 7.22, an attacker may use files created by saposcol to escalate privileges for themselves...
CVE-2022-37183
Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...
