57 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that any kunit in the drm/xe module that uses dmabuf for memory accesses should get its own externa...
CVE-2022-42128
The Hypermedia REST APIs module in Liferay Portal 7.4.1 through 7.4.3.4, and Liferay DXP 7.4 GA does not properly check permissions, which allows remote attackers to obtain a WikiNode object via the WikiNodeResource.getSiteWikiNodeByExternalReferenceCode API...
CVE-2022-27593
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later...
Exploit for CVE-2022-30190
CVE-2022-30190EXPPowerPoint This is exploit of CVE-2022-301...
Exploit for CVE-2022-30190
CVE-2022-30190EXPPowerPoint This is exploit of CVE-2022-301...
Exploit for CVE-2022-30190
PoC exploit for CVE-2022-30190, an exploit module targeting the...
Exploit for CVE-2022-30190
CVE-2022-30190 Microsoft Office Word Rce 复现CVE-2022-30190...
Kubernetes: Broken Link Takeover from kubernetes.io docs
Report Submission Form Summary: Kubernetes docs has Spanish translation available. One of the page of Portuguese doc has an external reference to a github repository. The github account was not registered on github.com. So I was able to takeover the page and host the PoC Kubernetes Version: NA...
UBUNTU-CVE-2018-12475
A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-downloadfiles of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects:...
The vulnerability of the org.codehaus.jackson component in the jackson-mapper-asl library allows a attacker to compromise data integrity.
The vulnerability of the org.codehaus.jackson component in the jackson-mapper-asl library is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...
CVE-2018-12243
The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity XXE exploit, which is a type of issue where XML input containing a reference to an external entity is processed by a weakly configured XML parser. The attack uses file URI schemes or relative paths ...
Description of the security update for Excel 2016: April 10, 2018
None None...
CVE-2016-2945
The API Discovery implementation in IBM WebSphere Application Server WAS 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document...
CVE-2016-2945
The API Discovery implementation in IBM WebSphere Application Server WAS 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document...
CVE-2016-2945
The API Discovery implementation in IBM WebSphere Application Server WAS 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document...
Apple OS X Text File External Reference Information Disclosure Vulnerability
Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability exists in Apple OS X that allows remote attackers to exploit the vulnerability to construct malicious text files that can be parsed by an application, which can obtain sensitive user information...
