Lucene search
+L

5460 matches found

HackRead
HackRead
added 2025/03/23 10:07 p.m.16 views

How to Delete Duplicate Photos on iPhone to Save Storage

Learn the easiest way to delete duplicate photos on your iPhone device with our simple, step-by-step guide...

7.2AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/03/22 2:27 p.m.10 views

SUSE CVE-2024-7773

REJECT DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-45436. Notes: All CVE users should reference CVE-2024-45436 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage...

6.5AI score
SaveExploits2References3
SUSE CVE
SUSE CVE
added 2025/03/21 2:50 a.m.12 views

SUSE CVE-2025-0313

REJECT DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-12055. Notes: All CVE users should reference CVE-2024-12055 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage...

6.5AI score
SaveExploits0References3
CVE
CVE
added 2025/03/20 10:10 a.m.54 views

CVE-2024-11301

CVE-2024-11301 affects lunary-ai/lunary prior to 1.6.3. The issue is the absence of a unique constraint on the combination of projectId and slug when creating evaluators, allowing an attacker to overwrite an existing evaluator by submitting a POST with the same slug. This leads to data integrity ...

6.5CVSS6.4AI score0.00572EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/20 10:09 a.m.6 views

CVE-2024-9000 Improper Authorization and Duplicate Slug Vulnerability in lunary-ai/lunary

In lunary-ai/lunary before version 1.4.26, the checklists.post endpoint allows users to create or modify checklists without validating whether the user has proper permissions. This missing access control permits unauthorized users to create checklists, bypassing intended permission checks...

7.1CVSS6.8AI score0.00532EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/03/20 10:09 a.m.21 views

CVE-2024-9000 Improper Authorization and Duplicate Slug Vulnerability in lunary-ai/lunary

In lunary-ai/lunary before version 1.4.26, the checklists.post endpoint allows users to create or modify checklists without validating whether the user has proper permissions. This missing access control permits unauthorized users to create checklists, bypassing intended permission checks...

7.1CVSS0.00532EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/03/20 12:00 a.m.6 views

PT-2025-28209

Name of the Vulnerable Software and Affected Versions: MongoDB Server version 8.1.0 Description: An authorized user can issue queries with duplicate id fields, leading to unexpected behavior in MongoDB Server, which may result in a crash. This issue can only be triggered by authorized users and...

6.8CVSS6.5AI score0.00282EPSS
SaveExploits0References11
OSV
OSV
added 2025/03/14 3:32 p.m.10 views

GHSA-3PWP-2FQJ-6G2P Duplicate Advisory: Qiskit allows arbitrary code execution decoding QPY format versions < 13

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6m2c-76ff-6vrf. This link is maintained to preserve external references. Original Description A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege...

9.8CVSS6AI score
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/13 12:00 a.m.8 views

Froxlor 安全漏洞

Froxlor is a suite of lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor versions prior to 2.2.6. An attacker exploiting this vulnerability could create accounts with the same email address as an existing account, potentially leading to accoun...

7.8CVSS6.3AI score0.00283EPSS
SaveExploits1References4
OSV
OSV
added 2025/03/12 6:32 p.m.12 views

GHSA-323W-6P85-26FR Duplicate Advisory: Plenti - Code Injection - Denial of Services

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mj4v-hp69-27x5. This link is maintained to preserve external references. Original Description Plenti = 0.7.16 is vulnerable to code execution. Users uploading '.svelte' files with the /postLocal endpoint can...

6.5CVSS8.8AI score
SaveExploits0References7
Veracode
Veracode
added 2025/03/12 8:14 a.m.7 views

Double-signing Attack

github.com/strangelove-ventures/horcrux is vulnerable to a double-signing attack. The vulnerability is due to a race condition in signature state handling when two independent events occurring within the same microsecond, allowing unintended duplicate signatures and leads to unintended...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/03/10 12:30 p.m.63 views

GHSA-2FH4-GPCH-VQV4 Duplicate Advisory: Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w8jq-xcqf-f792. This link is maintained to preserve external references. Original Description picklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model archives when certain ZIP file...

5.3CVSS9.7AI score
SaveExploits0References4
OSV
OSV
added 2025/03/10 12:30 p.m.25 views

GHSA-W6MR-MJ53-X258 Duplicate Advisory: Zip Exploit Crashes Picklescan But Not PyTorch

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7q5r-7gvp-wc82. This link is maintained to preserve external references. Original Description picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting t...

5.3CVSS6.4AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/03/10 12:30 p.m.16 views

Duplicate Advisory: Zip Exploit Crashes Picklescan But Not PyTorch

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7q5r-7gvp-wc82. This link is maintained to preserve external references. Original Description picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting t...

6.5CVSS7AI score0.00318EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/03/09 12:00 a.m.33 views

PT-2025-35718

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's netfilter module related to handling duplicate devices during netfilter table updates. Specifically, a chain or flowtable update may proceed with...

5.5CVSS5.5AI score0.00229EPSS
SaveExploits1
Snyk
Snyk
added 2025/03/07 4:42 p.m.5 views

Unsafe Dependency Resolution

Overview python-json-logger is a JSON Log Formatter for the Python Logging Package Affected versions of this package are vulnerable to Unsafe Dependency Resolution through the deletion of a critical dependency which could be maliciously claimed by a third party. An attacker can execute arbitrary...

8.8CVSS8.5AI score0.01961EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2025-21777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring...

5.5CVSS5.8AI score0.00201EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/03/04 10:40 p.m.2 views

Unsafe Dependency Resolution

Overview conda-forge-metadata is a programatic access to conda-forge's metadata Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to an unclaimed optional dependency. The package specifies an optional dependency on conda-oci-mirror, which is neither present on t...

10CVSS6.8AI score0.00723EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/03 9:30 p.m.12 views

GHSA-HW34-RQC5-H2GM Duplicate Advisory: Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-769v-p64c-89pr. This link is maintained to preserve external references. Original Description picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An...

5.3CVSS9.4AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2025/03/03 6:31 p.m.24 views

Duplicate Advisory: Remote Code Execution via Malicious Pickle File Bypassing Static Analysis

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-655q-fx9r-782v. This link is maintained to preserve external references. Original Description picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that use...

9.8CVSS7AI score0.01647EPSS
SaveExploits2References5Affected Software1
Rows per page
Query Builder