7371 matches found
Sensio Labs Twig 代码代码注入漏洞
Sensio Labs Twig is a PHP template engine from the French company Sensio Labs that supports custom tags and filters and the creation of DSLs. Sensio Labs Twig is vulnerable to injection, which can be exploited by attackers to run arbitrary PHP functions...
CVE-2022-24221
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php...
CVE-2022-24221
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php...
Sql injection
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php...
CVE-2022-24221
CVE-2022-24221 affects eliteCMS v1.0, with a vulnerability in the file path /admin/functions/functions.php that enables a SQL injection. The connected documents consistently describe remote-exploitation potential through crafted SQL requests to manipulate the database, access sensitive data, or p...
Elite Graphix Elite Cms SQL注入漏洞
eliteCMS is a popular content management system. A SQL injection vulnerability exists in eliteCMS /admin/functions/functions.php, which can be exploited by remote attackers to submit a special SQL request to manipulate the database, obtain sensitive information or execute arbitrary code...
Mageia: Security Advisory (MGASA-2021-0554)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2018-0484)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Improper Upper Bound Definition on the Fee
Handle Jujic Vulnerability details Impact The rJoePerSec does not have any upper or lower bounds. Values that are too large will lead to reversions in several critical functions. Proof of Concept function updateEmissionRateuint256 rJoePerSec external onlyOwner updatePool; rJoePerSec = rJoePerSec;...
Check transferFrom is from msg.sender
Handle mics Vulnerability details The following functions are taking money from a user but not necessary on its control. If a user sets more allowance than they have to, for example if they want to those functions many times and don't want to call approve again, then their funds can be stolen by...
SUSE-SU-2022:14879-1 Security update for aide
This update for aide fixes the following issues: - CVE-2021-45417: Fix a bufferoverflow in base64 functions bsc1194735...
PT-2022-4889 · Twisted +4 · Twisted +4
Name of the Vulnerable Software and Affected Versions: Twisted affected versions not specified Description: The issue is related to the exposure of cookies and authorization headers when following cross-origin redirects. This problem is present in the twisted.web.RedirectAgent and...
SUSE: Security Advisory (SUSE-SU-2022:0150-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2022:0150-1 Security update for aide
This update for aide fixes the following issues: - CVE-2021-45417: Fix a bufferoverflow in base64 functions bsc1194735...
L2Migrator calls wrong function on bondingManager
Handle harleythedog Vulnerability details Impact In L2Migrator, the function bondFor calls the function "bondForWithHint" on the bondingManager. This function does not exist anywhere in the protocol: the correct function name is simply "bondWithHint". This is a run-time issue the contracts will...
[SECURITY] Fedora 34 Update: e00compr-1.0.1-28.fc34
E00compr is an ANSI C library that reads and writes Arc/Info compressed E00 files. Both =EF=BF=BD=EF=BF=BD=EF=BF=BDPARTIAL=EF=BF=BD=EF=BF=BD=EF=BF=BD and =EF=BF=BD=EF=BF=BD=EF=BF=BDFULL=EF=BF=BD=EF=BF=BD=EF=BF=BD compression level s are supported. This package can be divided in three parts:...
Fedora: Security Advisory for e00compr (FEDORA-2022-7e94ba673b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlphaGolang - IDApython Scripts For Analyzing Golang Binaries
AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. The idea is to break the scripts into concrete steps, thus avoiding brittle monolithic scripts, and mimicking the methodology an analyst might follow when tackling a Go binary. Scripts are...
Unsafe mint is a reentrancy door
Handle pedroais Vulnerability details Impact Dangerous external calls in the middle of various state changes could cause reentrancy issues since there is no reentrancy guard in any functions. Proof of Concept When users call the deposit or sponsor functions a deposit NFT is minted. The safeMint...