15757 matches found
kernel: wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if ieee80211gettxpower returns the INTMIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in...
kernel: drm/i915: Fix memory leaks in i915 selftests
A memory leak flaw was found in the Linux kernel's Intel i915 graphics driver in the selftest page allocation logic. A local user can trigger this issue when running i915 selftests and the fakegetpages function encounters errors, causing the function to return without freeing previously allocated...
urllib3: Request body not stripped after redirect from 303 status changes request method to GET
A flaw was found in urllib3, an HTTP client library for Python. urllib3 doesn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303, after changing the method in a request from one that could accept a request body such as POST to GET, as is required by HTTP...
PT-2024-25208 · Unknown · Springblade
Name of the Vulnerable Software and Affected Versions: SpringBlade version 3.7.1 Description: An issue in SpringBlade allows attackers to obtain sensitive information via a crafted GET request to the "api/blade-system/tenant" endpoint. The api/blade-system/tenant endpoint is vulnerable to this...
PT-2024-40732 · Git +1 · Pcapplusplus
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of pcpp::TelnetLayer::getFieldLen an...
CVE-2024-33383
Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter...
CVE-2024-33332
An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...
Wallos SQL注入漏洞
Wallos is an open source personal subscription tracker by the individual developer Miguel Ribeiro. A SQL injection vulnerability exists in Wallos versions prior to 1.15.3, which originates from an easy SQL injection via the category and payment parameters of /subscriptions/get.php...
novel-plus 安全漏洞
novel-plus 小说精品屋-plus is a multi-end PC, WAP reading, full-featured original literature CMS system. A security vulnerability exists in novel-plus version 4.3.0 and earlier, which stems from an arbitrary file read vulnerability that allows remote attackers to obtain sensitive information via a...
osCommerce 4 Cross Site Scripting
Exploit Title: osCommerce 4 - Reflected XSS Exploit Author: skalvin Date: 22/04/2024 Vendor: osCommerce ltd. Vendor Homepage: https://www.oscommerce.com/ Software Link: https://demo.oscommerce.com/ Demo Link: https://demo.oscommerce.com/furniture/ Tested on: Windows 11 Pro Impact: Manipulate the...
CVE-2024-33383
The CVE-2024-33383 case concerns novel-plus versions 4.3.0 and earlier, with an Arbitrary File Read via a crafted GET request that uses the filePath parameter to expose sensitive data. Affected component is the application’s filePath-handling path; root cause is improper validation/handling of fi...
CVE-2024-33832
OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery SSRF via the component /index.php?c=api&method=getlinkinfo...
PT-2024-22861 · Wallos · Wallos
Name of the Vulnerable Software and Affected Versions: Wallos versions prior to 1.15.3 Description: The issue is related to SQL Injection via the category and payment parameters to the "/subscriptions/get.php" API endpoint. This allows for potential exploitation. Recommendations: For versions pri...
PT-2024-40729 · Pcapng · Pcapng
Name of the Vulnerable Software and Affected Versions: pcapng affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pcpp::PcapNgFileReaderDevice::getNextPacket function, which is called by...
SpringBlade 安全漏洞
Breed Network Technology SpringBlade is a suite of microservice development platforms from China's Breed Network Technology. A security vulnerability exists in SpringBlade version 3.7.1, which stems from a vulnerability that allows an attacker to obtain sensitive information via a crafted GET...
CVE-2024-33332
An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...
CVE-2024-33332
The CVE-2024-33332 entry affects SpringBlade 3.7.1, where a crafted GET request to the endpoint api/blade-system/tenant can disclose sensitive information. The connected sources consistently describe an information disclosure in SpringBlade 3.7.1 without broader exploitation details. Impact is de...
PT-2024-25226 · Unknown · Novel-Plus
Name of the Vulnerable Software and Affected Versions: novel-plus versions 4.3.0 and earlier Description: The issue allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter. This enables the attacker to read arbitrary files, potentially leadi...
