9031 matches found
flawfinder
About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...
CVE-2024-10924-Wordpress-Docker
CVE-2024-10924 : Wordpress Really Simple Security authentication bypass flaw in Docker Description The Really Simple Security plugins Free, Pro, and Pro Multisite for WordPress, versions 9.0.0 to 9.1.1.1, are affected by an authentication bypass vulnerability. This issue arises from improper erro...
EUVD-2026-66444
In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlogrecoverdquotcommitpass2 validates the recovered dquot with xfsdqblkverify and, on failure, sets error = -EFSCORRUPTED and jumps to outrelease. But outrelease unconditional...
CVE-2024-12139
Multiple WSO2 products are affected by a content spoofing vulnerability due to improper sanitization or validation of user-supplied input within URL parameters. This flaw allows attackers to manipulate and inject arbitrary content into error messages. The primary impact is the facilitation of soc...
CVE-2024-12139 Content Spoofing via Error Handling in Multiple WSO2 Products Enables Social Engineering Attacks
The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters under specific conditions. This allows end-users to manipulate the error messages that are displayed by the application. By exploiting this vulnerability, malicious actors can inject...
CVE-2024-12139 Content Spoofing via Error Handling in Multiple WSO2 Products Enables Social Engineering Attacks
The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters under specific conditions. This allows end-users to manipulate the error messages that are displayed by the application. By exploiting this vulnerability, malicious actors can inject...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incomi...
CVE-2017-1000117
CVE-2017-1000117 usage $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117.git when git has problem, ifconfig is executed...
CVE-2021-3560
CVE-2021-3560 Privilege escalation via race condition in polkit. Vulnerability Description CVE-2021-3560 is a race condition in polkit that allows an unauthenticated local user to gain root privileges. The vulnerability exists in the way polkit handles D-Bus errors when a connection is terminated...
CVE-2019-9053
Fixed it bcz of https://tryhackme.com/room/easyctf : enjoy Critical Issues Fixed 1. Python 2 to Python 3 Compatibility Old: print "string" New: print"string" Changed all print statements to print functions Updated string formatting to use f-strings 2. Deprecated optparse Library Old: import...
CVE-2025-62168
CVE-2025-62168 Squid Proxy Information Disclosure in Error handling Scanner Detection & PoC "Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. Severity: This problem allows a script to bypass Browser security protections and learn...
Testability-CVE-2014-1266
TestableSecurity This is a small proof-of-concept that lifts out the vulnerable SSLVerifySignedServerKeyExchange from Apple's libsecurityssl to demonstrate that the signing code is readily unit testable in isolation. While there's been some talk that this bug wasn't easily tested, the code in...
CLEANSTART-2025-QY88253 error-handling flaw was found in python-ecdsa before version 0
CVE-2019-14853 affects multiple packages. An error-handling flaw was found in python-ecdsa before version 0. See references for individual vulnerability details...
CVE-2025-62168
CVE-2025-62168 Squid Proxy Information Disclosure in Error handling Scanner Detection & PoC "Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. Severity: This problem allows a script to bypass Browser security protections and learn...
CLEANSTART-2026-DZ10178 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling)
Security vulnerability affects the mariadb package. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Error Handling...
CVE-2023-40130
https://wrlus.com/android-security/bindservice-error-handle/...
CVE-2024-10924-Exploit
CVE-2024-10924-Exploit Really Simple Security Free, Pro, and Pro Multisite 9.0.0 - 9.1.1.1 - Authentication Bypass 📖 Description This script exploits a vulnerability in the Really Simple Security plugin versions 9.0.0 - 9.1.1.1 for WordPress.The flaw allows authentication bypass due to improper...
CVE-2024-10924
POC for CVE-2024-10924 An error handling flaw in the REST API of the Really Simple Plugins WordPress plugin versions between 9.0.0 and 9.1.1.1 included allows an attacker, when Two-Factor Authentication is enabled, to bypass authentication and take control of an existing user or administrator...
CVE-2024-10924-Wordpress-Docker
CVE-2024-10924 : Wordpress Really Simple Security authentication bypass flaw in Docker Description The Really Simple Security plugins Free, Pro, and Pro Multisite for WordPress, versions 9.0.0 to 9.1.1.1, are affected by an authentication bypass vulnerability. This issue arises from improper erro...
CLEANSTART-2024-ZI86941 attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar
Security vulnerability affects the firefox-esr package. An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar...