Sql Injection

Zend framework is vulnerable to Sql Injection. The vulnerability is due to improper input validation, allowing remote attackers to execute arbitrary SQL commands via a null byte...

WordPress plugin Jetpack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

10-Year-Old 'RUBYCARP' Romanian Hacker Group Surfaces with Botnet

A threat group of suspected Romanian origin called RUBYCARP has been observed maintaining a long-running botnet for carrying out crypto mining, distributed denial-of-service DDoS, and phishing attacks. The group, believed to be active for at least 10 years, employs the botnet for financial gain,...

PT-2024-1921

Name of the Vulnerable Software and Affected Versions Spring Framework versions prior to the fixed version Description The issue arises from insufficient validation of user-input data in the Spring Framework, potentially allowing an attacker to perform a Server-Side Request Forgery SSRF attack or...

The vulnerability of the SAP Application Interface Framework, a software tool for developing and managing application interfaces, arises from improper code generation. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the SAP Application Interface Framework, a software tool for developing and managing application interfaces, is related to improper code generation. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of data...

CVE-2024-24825

DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resources to unintended parties. This issue has been addressed in release version 8.0.37. Users are advised to upgrade. There are no known...

Dell Update Package (DUP) Framework Backlink Vulnerability

Dell Update Package DUP Framework is a framework for updating system components from Dell USA. The product primarily provides installers for drivers, applications, BIOS, and firmware. A security vulnerability exists in Dell Update Package DUP Framework version 4.9.4.36 and earlier versions. An...

OESA-2024-1072 testng security update

TestNG is a testing framework inspired from JUnit and NUnit but introducing some new functionality that make it more powerful and easier to use, such as: Annotations. Run your tests in arbitrarily big thread pools with various policies available all methods in their own thread, one thread per tes...

GHSA-JW42-5M4V-9C8G Duplicate Advisory: NuGet Client Security Feature Bypass Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-68w7-72jg-6qpp. This link is maintained to preserve external references. Original Description NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. A security vulnerability exists in Google Android, which stems from a vulnerability in Framework that could lead to local privilege escalation...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. A security vulnerability exists in Google Android, which stems from a vulnerability in Framework that could lead to local privilege escalation...

CVE-2023-49293 Cross-site Scripting in `server.transformIndexHtml` via URL payload in vite

Vite is a website frontend framework. When Vite's HTML transformation is invoked manually via server.transformIndexHtml, the original request URL is passed in unmodified, and the html being transformed contains inline module scripts ..., it is possible to inject arbitrary HTML into the transforme...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which stems from a vulnerability in Framework that could lead to elevation of privilege...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which stems from a vulnerability in Framework that could lead to elevation of privilege...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which stems from a vulnerability in Framework that could lead to elevation of privilege...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which stems from a vulnerability in Framework that could lead to elevation of privilege...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. An information disclosure vulnerability exists in Google Android Framework, which can be exploited by attackers to obtain sensitive information...

SUSE CVE-2020-0603

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'...

CVE-2023-22106

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: API. Supported versions that are affected are ECC: 8, 9 and 10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterpris...

ch.atomy.com Open Redirect vulnerability OBB-3711907

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...