223 matches found
CVE-2023-52571
In the Linux kernel, the following vulnerability has been resolved: power: supply: rk817: Fix node refcount leak Dan Carpenter reports that the Smatch static checker warning has found that there is another refcount leak in the probe function. While ofnodeput was added in one of the return paths, ...
CVE-2023-52571
In the Linux kernel, the following vulnerability has been resolved: power: supply: rk817: Fix node refcount leak Dan Carpenter reports that the Smatch static checker warning has found that there is another refcount leak in the probe function. While ofnodeput was added in one of the return paths, ...
CVE-2023-46615
Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7...
CVE-2023-46615
Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7...
Deserialization of untrusted data
Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7...
CVE-2023-46615
CVE-2023-46615 affects the WordPress KD Coming Soon plugin. Multiple sources confirm a PHP Object Injection (deserialization of untrusted data) vulnerability in KD Coming Soon <= 1.7, with unauthenticated access. One document notes a potential code execution path if a POP chain exists with oth...
CVE-2023-46615: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7...
CVE-2023-51504
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Dulaney Dan's Embedder for Google Calendar allows Stored XSS.This issue affects Dan's Embedder for Google Calendar: from n/a through 1.2...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Dulaney Dan's Embedder for Google Calendar allows Stored XSS.This issue affects Dan's Embedder for Google Calendar: from n/a through 1.2...
CVE-2023-43304
An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
PT-2023-28772 · Line · Line +1
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the PARK DANDAN mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For Line version 13.6.1, consider disabling the...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line PARK DANDAN mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...
PT-2023-30113
Name of the Vulnerable Software and Affected Versions Kalli Dan KD Coming Soon versions 1.7 and earlier Description The issue is related to the deserialization of untrusted data. This can potentially lead to security risks, as deserializing untrusted data can allow an attacker to execute maliciou...
Malware in situs-slot-gacor-slot-online-resmi-terbaik-mudah-menang-dan-maxwin-2023
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Groupnotes Inc. Videostream Mac client allows for privilege escalation to root account
Overview Groupnotes Inc. Videostream Mac client installs a LaunchDaemon that runs with root privileges. The daemon is vulnerable to a race condition that allows for arbitrary file writes. A low privileged attacker can escalate privileges to root on affected systems. Description Every five hours t...
arnhotel.com Cross Site Scripting vulnerability OBB-3565354
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pumpsouth.com Cross Site Scripting vulnerability OBB-3565345
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
dan-ball.jp Cross Site Scripting vulnerability OBB-3453173
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2023-210 Malicious code in coyote-america-a-natural-and-supernatural-history-by-dan-flores-on-audiobook-new-version- (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea10dc5f5d9a551fd232299c8b9a024a12aa3ffe0dfde7bf48530ec0851bde51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
dan-steel.com Cross Site Scripting vulnerability OBB-2982836
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...