525 matches found
FFmpeg 安全漏洞
ffmpeg is a rust library by meh.individual developer. A security vulnerability exists in versions of FFmpeg prior to 8.0, which stems from an integer underflow when parsing a DHAV file header, which may result in a duration before reading the allocation buffer...
EUVD-2025-27660
Malicious code in bioql PyPI...
EUVD-2023-45614
Malicious code in bioql PyPI...
EUVD-2024-0944
Malicious code in bioql PyPI...
MaxQueryDuration not honoured in Samba AD DC LDAP
...
The vulnerability of the built-in software of the PLC Fastwel relates to the incorrect duration of a session, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the built-in software of the PLC Fastwel is related to an incorrect session duration. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
[SECURITY] Fedora 43 Update: bustle-0.12.0-3.fc43
Bustle draws sequence diagrams of D-Bus activity, showing signal emissions, method calls and their corresponding returns, with timestamps for each individual event and the duration of each method call. This can help you check for unwanted D-Bus traffic, and pinpoint why your D-Bus-based applicati...
CVE-2025-8692
The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘logduration’ parameter in all versions up to, and including, 6.2.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2025-8692
CVE-2025-8692 affects the Coupon API plugin for WordPress (versions up to 6.2.9). An authenticated attacker with Administrator+ privileges can exploit SQL Injection via the log_duration parameter to append additional SQL queries and potentially exfiltrate data. Remediation per Patchstack and rela...
PT-2025-37138
The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘log duration’ parameter in all versions up to, and including, 6.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
WordPress plugin Coupon API SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
Linux Distros Unpatched Vulnerability : CVE-2016-6329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...
The software for connecting and managing data in IBM Sterling Connect:Direct Web Services is vulnerable due to incorrect session expiration times, allowing attackers to perform spoofing attacks.
The vulnerability of the software for connecting and managing data in IBM Sterling Connect:Direct Web Services is related to incorrect session duration. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...
The vulnerability of the IBM Planning Analytics Local software for managing business efficiency lies in its incorrect session duration settings, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the IBM Planning Analytics Local software for managing business efficiency is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the FortiIsolator browser isolation platform and the FortiSandbox threat detection and mitigation system lies in the incorrect session duration, allowing attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of the FortiIsolator browser isolation platform and the FortiSandbox threat detection and mitigation system is related to an incorrect session duration. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected...
The vulnerability of the AutoGRAPH Web monitoring software lies in the incorrect duration of a session, which allows an intruder to gain unauthorized access to protected information.
The vulnerability of the AutoGRAPH Web monitoring software platform lies in the incorrect duration of a session. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially crafted HTTP request...
Exploiting Context-Dependent Duration Features for Voice Anonymization Attack Systems
The temporal dynamics of speech, encompassing variations in rhythm, intonation, and speaking rate, contain important and unique information about speaker identity. This paper proposes a new method for representing speaker characteristics by extracting context-dependent duration embeddings from...
User-To-PC Authentication through Confirmation on Mobile Devices: on Usability and Performance
Protecting personal computers PCs from unauthorized access typically relies on password authentication, which is know to suffer from cognitive burden and weak credentials. As many users nowadays carry mobile devices with advanced security features throughout their day, there is an opportunity to...
SourceCodester Best Salon Management System 注入漏洞
SourceCodester Best Salon Management System is SourceCodester open source a salon management system. SourceCodester Best Salon Management System version 1.0 has an injection vulnerability , the vulnerability stems from the wrong operation of the parameters planname/description/durationdays/price ...
The vulnerability of the function ieee80211_get_rate_duration() in the net/mac80211/airtime.c module of the mac80211 stack in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ieee80211getrateduration function in the net/mac80211/airtime.c module of the mac80211 stack in the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...