Privilege escalation

Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code...

CVE-2021-40954

Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code...

Autodesk AutoCAD Resource Management Error Vulnerability

Autodesk AutoCAD is a professional 3D drawing software from Autodesk, Inc. Autodesk AutoCAD versions 2022, 2021, 2020 and 2019 have a security vulnerability that could be exploited by attackers to execute arbitrary code...

Ubuntu: Security Advisory (USN-5487-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Privilege escalation

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

USN-5487-1: Apache HTTP Server vulnerabilities

It was discovered that Apache HTTP Server modproxyajp incorrectly handled certain crafted request. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. CVE-2022-26377 It was discovered that Apache HTTP Server incorrectly handled certain request. An attacker...

Queued proposals cannot be executed in GovernorBravoDelegate.sol

Lines of code GovernorBravoDelegate.solL63 Vulnerability details Impact In GovernorBravoDelegate.sol's queue function, the executed value for the proposal to be queued is set to true. The execute function in GovernorBravoDelegate.sol will revert when called since the state of the proposal is...

Anyone can execute a proposal

Lines of code Vulnerability details Impact Anyone can call execute and pass in a malicious proposal. Proof of Concept There is no access control for the execute function. Tools Used Manual Review. Recommended Mitigation Steps Implement access control to execute. --- The text was updated...

CVE-2022-1824

An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a specific file name. This could result in the user gaining elevated permissions and being able to execute arbitrary co...

Adobe InDesign out-of-bounds write vulnerability (CNVD-2022-48769)

An out-of-bounds write vulnerability exists in Adobe InDesign, a set of typesetting and editing applications from Adobe. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...

Adobe InDesign out-of-bounds write vulnerability (CNVD-2022-48780)

Adobe InDesign is a set of typesetting and editing applications from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe InDesign, which could be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe InDesign out-of-bounds write vulnerability (CNVD-2022-48781)

Adobe InDesign is a set of typesetting and editing applications from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe InDesign, which could be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe InDesign out-of-bounds write vulnerability (CNVD-2022-48770)

An out-of-bounds write vulnerability exists in Adobe InDesign, a set of typesetting and editing applications from Adobe. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...

Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2022-76633)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...

Adobe InDesign out-of-bounds write vulnerability (CNVD-2022-48767)

An out-of-bounds write vulnerability exists in Adobe InDesign, a set of typesetting and editing applications from Adobe. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...

In execute() the amount routers pay is what user signed, but in _reconcile() the amount routers get is what nomad sends and this two amount are not necessary equal because of slippage in original domain

Lines of code Vulnerability details Impact routers pay for transaction in destination domain then nomad messages come and routers get paid again. but the amount routers pay in execute are what transaction sender signed and the amount routers receive is what nomad sends and handles in reconcile bu...

Malicious Relayers Could Favor Their Routers

Lines of code Vulnerability details Vulnerability Details Assume that a malicious relayer operates a router in Connext providing fast-liquidity service. A malicious relayer could always swap the routers within the execute calldata with the routers owned by malicious relayer, and submit it to the...

Oracle Linux 8 : olcne (ELSA-2022-9494)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9494 advisory. 1.4.5-1 - Address qemu CVE-2022-26353, CVE-2021-3748 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Bank Management System Cross-Site Scripting Vulnerability

Bank Management System is a bank management system. A cross-site scripting vulnerability exists in Bank Management System version 1.0, which stems from a failure to properly filter content at the /mnotice.php?id=2 parameter. A remote attacker could use this vulnerability to execute cross-site...

Adobe InCopy out-of-bounds write vulnerability (CNVD-2022-48784)

Adobe InCopy is a text editing software for authoring from Adobe U.S.A. An out-of-bounds write vulnerability exists in Adobe InCopy. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...