PT-2023-12711 · Western Digital · Western Digital Ufs Host Boot Rom

Name of the Vulnerable Software and Affected Versions: Western Digital UFS Host Boot ROM affected versions not specified Description: A weakness has been identified in the UFS standard that could result in a security issue. This issue may exist in systems where the Host boot ROM code implements t...

Western Digital UFS 安全漏洞

Western Digital UFS is an application from Western Digital. A security vulnerability exists in Western Digital UFS, which stems from the fact that an attacker may be able to disable boot functionality or revert to old boot loader code if the host boot ROM code is not implemented properly...

CVE-2022-23005

Technical details (affected products, versions, root cause, or remediation) are not publicly available in the provided documents. Monitor for updates from official advisories and vendor disclosures.

Exploring the Vulnerabilities of Seaport: A Technical Analysis of a Fake Signature Attack on Non-Fungible Tokens

Lines of code Vulnerability details Impact This finding aims to provide a comprehensive analysis of the sc4m trend, which emerged in August 2022, and has since been a prevalent issue in the WEB3 space. Despite efforts to combat this phenomenon, bad actors continue to engage in illicit activities,...

CVE-2023-24025

CRYSTALS-DILITHIUM in Post-Quantum Cryptography Selected Algorithms 2022 in PQClean d03da30 may allow universal forgeries of digital signatures via a template side-channel attack because of intermediate data leakage of one vector...

Design/Logic Flaw

CRYSTALS-DILITHIUM in Post-Quantum Cryptography Selected Algorithms 2022 in PQClean d03da30 may allow universal forgeries of digital signatures via a template side-channel attack because of intermediate data leakage of one vector...

CVE-2023-23489

The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edddownloadsearch' action...

CVE-2023-23489

The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edddownloadsearch' action...

Sql injection

The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edddownloadsearch' action...

Real-World Steganography

From an article about Zheng Xiaoqing, an American convicted of spying for China: According to a Department of Justice DOJ indictment, the US citizen hid confidential files stolen from his employers in the binary code of a digital photograph of a sunset, which Mr Zheng then mailed to himself...

PQClean 数据伪造问题漏洞

PQClean is a clean, portable, and tested implementation of post-quantum cryptography. PQClean suffers from a security vulnerability that stems from an intermediate data leak in vectors leading to the possibility of forging digital signatures...

CVE-2023-23489: Improper Neutralization of Special Elements used in an SQL Command

The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edddownloadsearch' action...

CVE-2023-24025

CVE-2023-24025 concerns the PQClean implementation of CRYSTALS-DILITHIUM (version vector d03da30) where an intermediate data leak in a single vector can enable universal forgeries of digital signatures. The issue is tied to the CRYSTALS-DILITHIUM component used within PQClean, not to a broader pr...

CVE-2023-24025

CRYSTALS-DILITHIUM in Post-Quantum Cryptography Selected Algorithms 2022 in PQClean d03da30 may allow universal forgeries of digital signatures via a template side-channel attack because of intermediate data leakage of one vector...

CVE-2023-23489

The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edddownloadsearch' action...

CVE-2023-24025

CRYSTALS-DILITHIUM in Post-Quantum Cryptography Selected Algorithms 2022 in PQClean d03da30 may allow universal forgeries of digital signatures via a template side-channel attack because of intermediate data leakage of one vector...

CVE-2023-23489

The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edddownloadsearch' action...

CVE-2023-23489

The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edddownloadsearch' action...

CVE-2023-23489

CVE-2023-23489 concerns the WordPress Easy Digital Downloads plugin. Versions 3.1.0.2 and 3.1.0.3 are affected by an unauthenticated SQL injection in the edd_download_search action via the s parameter. This could allow an attacker to read/modify data and potentially perform unauthorized operation...

WordPress Plugin The Easy Digital Downloads SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...