PT-2023-34333 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue concerns the pci device is present function, specifically in relation to Virtual Functions VFs and their parent Physical Functions PFs. The problem is addressed by checking the P...

PT-2023-10817 · Bigtree · Events Extension

Name of the Vulnerable Software and Affected Versions: Events Extension on BigTree affected versions not specified Description: A critical issue was found in the Events Extension, affecting the getRandomFeaturedEventByDate, getUpcomingFeaturedEventsInCategoriesWithSubcategories, recacheEvent, and...

CVE-2022-4060: Undefined Security Weakness

The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it...

Sql injection

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...

CVE-2015-10051

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...

CVE-2015-10051: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...

PT-2023-10230 · Unknown · Bony2023 Discussion-Board

Name of the Vulnerable Software and Affected Versions: bony2023 Discussion-Board affected versions not specified Description: A critical issue has been found in the bony2023 Discussion-Board, affecting the display all replies function of the file functions/main.php. The manipulation of the str...

PT-2023-35917 · Git +1 · Libplist

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type indicating a Heap-buffer-overflow READ 1. The crash state involves functions such as par...

git2 Rust package suppresses ssh host key checking

By default, when accessing an ssh repository ie via an ssh: git repository url the git2 Rust package does not do any host key checking. Additionally, the provided API is not sufficient for a an application to do meaningful checking itself. Impact When connecting to an ssh repository, and when an...

ChatGPT-Written Malware

I dont know how much of a thing this will end up being, but we are seeing ChatGPT-written malware in the wild. …within a few weeks of ChatGPT going live, participants in cybercrime forums--­some with little or no coding experience­--were using it to write software and emails that could be used fo...

SUSE-SU-2023:0058-1 Security update for systemd

This update for systemd fixes the following issues: Fixing the following issues: - units: restore RemainAfterExit=yes in systemd-vconsole-setup.service - vconsole-setup: don't concat strv if we don't need to i.e. not in debug log mode - vconsole-setup: add more log messages - units: restore Befor...

Insufficient Entropy In Randomly-Generated Alphanumeric Strings

github.com/masterminds/goutils has insufficient entropy In randomly-generated alphanumeric strings. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9 which significantly reduces the amount of entropy in short strings...

MEGA International HOPEX Cross-Site Script Vulnerabilities

MEGA International HOPEX is a single software platform from MEGA International, France. combining integrated software solutions including privacy and data management, business process analysis and risk management. A security vulnerability exists in MEGA International HOPEX version 15.2.0.6110,...

PT-2023-10143 · Unknown · Mapoor Voteapp

Name of the Vulnerable Software and Affected Versions: mapoor voteapp affected versions not specified Description: A critical issue has been found, affecting the function create poll/do poll/show poll/show refresh of the file app.py. This issue leads to sql injection. Recommendations: Apply a pat...

CVE-2022-36925: Use of Hard-coded Cryptographic Key

Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism. The encryption key used for IPC between the Zoom Rooms daemon service and the Zoom Rooms client was generated using parameters that could be obtained by a local low-privileged application. That key ca...

Calling execute() and executeBatch() functions in SmartAccount.sol from the EntryPoint will fail

Lines of code Vulnerability details Impact The function requireFromEntryPointOrOwner is being called within the execute and executeBatch functions to check if the msg.sender is either the owner or the EntryPoint contract, but these functions have onlyOwner modifier, which will only allow the owne...

Denial Of Service (DoS)

newsboat is vulnerable to denial of service DoS attacks. Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires the user to set any environment variable in a different thread than the affected functions. The affected functions are...

DEBIAN-CVE-2022-46489

GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gfisomboxparseex function at boxfuncs.c...

Security Restrictions Bypass

sqlite is vulnerable to security restrictions bypass. When relying on --safe for execution of an untrusted CLI script, it does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE...

coebot-www Cross-Site Scripting Vulnerability

coebot-www is a web interface for CoeBot by Hayden Schiff, an individual developer. A cross-site scripting vulnerability exists in coebot-wwww, which stems from the functions displayChannelCommands/displayChannelQuotes/displayChannelAutoreplies/showChannelHighlights/showChannelBoi in the...