4095 matches found
CVE-2022-30190
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs,...
Exploit for CVE-2022-30190
CVE-2022-30190 On Monday May 30, 2022, Microsoft issued CVE...
PT-2022-20318
Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the admin/editproductetails.php endpoint. This allows for potential unauthorized access and manipulation of data. Recommendations...
PT-2022-20343
Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue allows for SQL Injection via the adminusers edit.php endpoint. This could potentially lead to unauthorized access or manipulation of data. Recommendations For Wedding Management Syste...
PT-2022-20340
Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the admin/client assign.php endpoint. This allows for potential unauthorized access or manipulation of data. Recommendations Fo...
PT-2022-20341
Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue allows for SQL Injection via the adminpackage edit.php endpoint. This could potentially lead to unauthorized access or manipulation of data. Recommendations For Wedding Management...
Vulnerabilities fixed in Open Automation Software Platform
Vulnerabilities have been fixed in Open Automation Software Platform. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication Remote code execution User rights Accessing...
Manipulating Machine-Learning Systems through the Order of the Training Data
Yet another adversarial ML attack: Most deep neural networks are trained by stochastic gradient descent. Now “stochastic” is a fancy Greek word for “random”; it means that the training data are fed into the model in random order. So what happens if the bad guys can cause the order to be not rando...
Server-Side Request Forgery in charm
We've discovered a vulnerability in which attackers could forge HTTP requests to manipulate the charm data directory to access or delete anything on the server. This has been patched in https://github.com/charmbracelet/charm/commit/3c90668f955c7ce5ef721e4fc9faee7053232fd3 and is available in...
GHSA-4WPP-W5R4-7V5V Server-Side Request Forgery in charm
We've discovered a vulnerability in which attackers could forge HTTP requests to manipulate the charm data directory to access or delete anything on the server. This has been patched in https://github.com/charmbracelet/charm/commit/3c90668f955c7ce5ef721e4fc9faee7053232fd3 and is available in...
GHSA-47H6-HFPV-7PHJ Magento 2 Community Edition RCE Vulnerability
A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with system data manipulation privileges can execute aribitrary code through arbitrary file deletion and OS command injection. As per the Magento Release 2.3....
Cybozu Garoon Input Validation Error Vulnerability (CNVD-2022-54303)
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An input validation error vulnerability exists in Cybozu Garoon, which stems from insufficient validation of...
GHSA-QMH2-H7R6-GM6Q Client BlockTokens not checked in Apache Hadoop
DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and...
NVIDIA GPU Display Driver 输入验证错误漏洞
NVIDIA GPU Display Driver is a driver software from NVIDIA Corporation that is used for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from unverified or incorrectly verified received input or...
GHSA-4HX3-M8W5-G5QH yii2-redis Potential Remote code execution
Potential remote code execution in LUA context of the redis server via methods yii\redis\ActiveRecord::findOne and yii\redis\ActiveRecord::findAll in yiisoft/yii2-redis. Attackers could probably manipulate data on the redis server...
yii2-redis Potential Remote code execution
Potential remote code execution in LUA context of the redis server via methods yii\redis\ActiveRecord::findOne and yii\redis\ActiveRecord::findAll in yiisoft/yii2-redis. Attackers could probably manipulate data on the redis server...
Cobbler Improper Validation of Security Tokens
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API /cobblerapi that can result in Privilege escalation, data manipulation or...
GHSA-F88Q-22G8-FRCG Cobbler Improper Validation of Security Tokens
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API /cobblerapi that can result in Privilege escalation, data manipulation or...
ChakraCore vulnerable to privilege escalation
ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take...
GHSA-C79V-2RJQ-965M ChakraCore vulnerable to privilege escalation
ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take...