CVE-2023-2107: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in IBOS 4.5.5. Affected is an unknown function of the file file/personal/del&op=recycle. The manipulation of the argument fids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

PT-2023-20045 · Totolink · Totolink A7100Ru

Name of the Vulnerable Software and Affected Versions: TOTOlink A7100RU version 7.4cu.2313 B20191024 Description: A command injection issue was discovered in the router, specifically via the ou parameter at the "/setting/delStaticDhcpRules" API endpoint. This allows for potential exploitation...

In nf_tables_updtable if nf_tables_table_enable returns an error nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del() but the transaction was never placed on a list -- the list head is all zeroes this results in a NULL pointer dereference.

...

SUSE CVE-2008-0924

Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service daemon crash or CPU consumption or execute arbitrary code via a long delRequest...

SUSE CVE-2021-3640

A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...

SUSE CVE-2022-3565

A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function deltimer of the file drivers/isdn/mISDN/l1oipcore.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue...

CVE-2022-4736

A vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument thetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

Cross site scripting

A vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument thetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

CVE-2022-4736 Venganzas del Pasado cross site scripting

A vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument thetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

CVE-2022-4736 Venganzas del Pasado cross site scripting

A vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument thetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

CVE-2022-4736

CVE-2022-4736 affects Venganzas del Pasado. The issue is described as cross-site scripting caused by manipulation of the_title across unknown functions, with remote exploitation implied. A patch named 62339b2ec445692c710b804bdf07aef4bd247ff7 is identified as fix, and VDB-216770 is the vulnerabili...

CVE-2022-4736

A vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument thetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

CVE-2022-4736 Venganzas del Pasado cross site scripting

A vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument thetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

Venganzas del Pasado 跨站脚本漏洞

Venganzas del Pasado is the source code for a website by Juan Schwindt, an individual developer. Venganzas del Pasado suffers from a cross-site scripting vulnerability that stems from thetitle parameter of several of its unknown functions that allows an attacker to implement cross-site scripting...

CVE-2022-4736: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument thetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

CVE-2022-45716

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function...

CVE-2022-45714

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function...

PT-2022-36615

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.333 Description The issue is related to a use-after-free in the l2cap conn del function. This problem was introduced in version v4.9.326 and is fixed in version v4.9.333. The actual impact and attack...

PT-2022-36569

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14.291 through 4.14.298 Description A use-after-free issue exists in the l2cap conn del function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.14.291...

yucatanplayadelcarmen.com Cross Site Scripting vulnerability OBB-3082386

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...