417 matches found
EUVD-2023-45614
Malicious code in bioql PyPI...
EUVD-2024-0944
Malicious code in bioql PyPI...
MaxQueryDuration not honoured in Samba AD DC LDAP
...
[SECURITY] Fedora 43 Update: bustle-0.12.0-3.fc43
Bustle draws sequence diagrams of D-Bus activity, showing signal emissions, method calls and their corresponding returns, with timestamps for each individual event and the duration of each method call. This can help you check for unwanted D-Bus traffic, and pinpoint why your D-Bus-based applicati...
CVE-2025-8692
The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘logduration’ parameter in all versions up to, and including, 6.2.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2025-8692
CVE-2025-8692 affects the Coupon API plugin for WordPress (versions up to 6.2.9). An authenticated attacker with Administrator+ privileges can exploit SQL Injection via the log_duration parameter to append additional SQL queries and potentially exfiltrate data. Remediation per Patchstack and rela...
WordPress plugin Coupon API SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
PT-2025-37138
The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘log duration’ parameter in all versions up to, and including, 6.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
Linux Distros Unpatched Vulnerability : CVE-2016-6329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...
The vulnerability of the FortiIsolator browser isolation platform and the FortiSandbox threat detection and mitigation system lies in the incorrect session duration, allowing attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of the FortiIsolator browser isolation platform and the FortiSandbox threat detection and mitigation system is related to an incorrect session duration. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected...
The vulnerability of the AutoGRAPH Web monitoring software lies in the incorrect duration of a session, which allows an intruder to gain unauthorized access to protected information.
The vulnerability of the AutoGRAPH Web monitoring software platform lies in the incorrect duration of a session. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially crafted HTTP request...
Exploiting Context-Dependent Duration Features for Voice Anonymization Attack Systems
The temporal dynamics of speech, encompassing variations in rhythm, intonation, and speaking rate, contain important and unique information about speaker identity. This paper proposes a new method for representing speaker characteristics by extracting context-dependent duration embeddings from...
User-To-PC Authentication through Confirmation on Mobile Devices: on Usability and Performance
Protecting personal computers PCs from unauthorized access typically relies on password authentication, which is know to suffer from cognitive burden and weak credentials. As many users nowadays carry mobile devices with advanced security features throughout their day, there is an opportunity to...
SourceCodester Best Salon Management System 注入漏洞
SourceCodester Best Salon Management System is SourceCodester open source a salon management system. SourceCodester Best Salon Management System version 1.0 has an injection vulnerability , the vulnerability stems from the wrong operation of the parameters planname/description/durationdays/price ...
The vulnerability of the function ieee80211_get_rate_duration() in the net/mac80211/airtime.c module of the mac80211 stack in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ieee80211getrateduration function in the net/mac80211/airtime.c module of the mac80211 stack in the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the IBM InfoSphere Information Server software platform, related to incorrect session duration, allows attackers to gain unauthorized access to protected information.
The vulnerability of the IBM InfoSphere Information Server software platform is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the SIMATIC PCS neo technology process management web system, related to incorrect session duration, allows a intruder to intercept the user’s session.
The vulnerability of the SIMATIC PCS neo technology process management web system is related to incorrect session duration. Exploiting this vulnerability could allow an attacker to intercept the user’s session...
The vulnerability of platform monitoring systems for events detection, threat detection, and security analytics in IBM QRadar Suite and IBM Cloud Pak for Security lies in incorrect session duration settings, which allows attackers to compromise the confidentiality and integrity of protected information.
The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to incorrect session duration settings. Exploiting these vulnerabilities can allow attackers operating remotely to compromise...
PT-2025-24287 · Unknown · Phpgurukul Employee Record Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue was found in the PHPGurukul Employee Record Management System. This issue affects the file /editmyexp.php and allows for SQL injection through the...
Citrix Monitor: user logon time is really high due authentication time
When checking Citrix Director or DaaS Monitoring, on user's Logon Performance, we can see that the Average Logon Duration is high Checking in individual user's logon, Authentication time is really high for some users, what increases the average time...