89 matches found
Code injection
An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...
CVE-2023-31461
Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability...
SteelSeries GG 安全漏洞
SteelSeries GG is an all-in-one gaming platform from Danish company SteelSeries. It bundles powerful gaming applications into one easy-to-use interface. SteelSeries GG version 36.0.0 contains a security vulnerability that can be exploited by an attacker to change values in an unencrypted database...
CVE-2023-31462
An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...
CVE-2023-31461
CVE-2023-31461 is a path-traversal vulnerability in SteelSeries GG (version 36.0.0) with an open API listener that can be abused to create a sub-application execute automatically from a controlled location. Affected product: SteelSeries GG 36.0.0. Root cause: path traversal via the open API liste...
CVE-2023-31462
CVE-2023-31462 affects SteelSeries GG 36.0.0. The issue arises from an unencrypted database that is writable by all users on the host, enabling an attacker to change values and trigger code execution with higher privileges. The available documents confirm the affected software/version and the und...
CVE-2023-31462
An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...
SteelSeries GG 路径遍历漏洞
SteelSeries GG is an all-in-one gaming platform from Danish company SteelSeries. It bundles powerful gaming applications into an easy-to-use interface. A path traversal vulnerability exists in SteelSeries GG version 36.0.0, which can be exploited by an attacker to create a sub-application via an...
PT-2023-23343 · Steelseries · Steelseries Gg
Name of the Vulnerable Software and Affected Versions: SteelSeries GG version 36.0.0 Description: The issue allows attackers to exploit an open API listener to create a sub-application that will be executed automatically from a controlled location, due to a path traversal vulnerability...
CVE-2023-31461
Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability...
b4.gg Cross Site Scripting vulnerability OBB-1335303
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Code injection
The transferProxy and approveProxy functions of a smart contract implementation for SmartMesh SMT, an Ethereum ERC20 token, allow attackers to accomplish an unauthorized transfer of digital assets because replay attacks can occur with the same-named functions with the same signatures in other...
CVE-2018-10769
The transferProxy and approveProxy functions of a smart contract implementation for SmartMesh SMT, an Ethereum ERC20 token, allow attackers to accomplish an unauthorized transfer of digital assets because replay attacks can occur with the same-named functions with the same signatures in other...
gg-lb.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-457572 Description| Value ---|--- Affected Website:| gg-lb.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...
SQL injection vulnerability in the ID parameter of the GG.aspx page of the Quality Supervision Station Comprehensive Information Service Platform of Zhuhai Xinhua Tong Software Co.
ZHXHT Supervision and Regulation Comprehensive Service Platform is a comprehensive platform integrating engineering supervision, testing supervision, commercial mixing supervision, web portal, commercial mixing quality networking supervision, credit rating, OA office, SMS system, wireless...
Gentoo Security Advisory GLSA 201412-10
Gentoo Linux Local Security Checks GLSA 201412-10 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2013-6487
CVE-2013-6487 affects Pidgin/libgadu: Integer/Content-Length handling in the Gadu-Gadu parser (gg) in libpurple/http.c can overflow a buffer when a large Content-Length is processed. This vulnerability is described as allowing a buffer overflow with potential remote code execution or crash. Publi...
xRadio 0.95b - '.xrl' Local Buffer Overflow (SEH)
GotGeek Labs http://www.gotgeek.com.br/ xRadio 0.95b .xrl Local Buffer Overflow SEH + Description With xRadio you can listen internet radio with Windows Media Player Technology tm. You can setup a radio list and import asx's files. The program stay on the tray bar. + Information Title: xRadio 0.9...
Microsoft Media Decompression Remote Code Execution Vulnerability (2447961)
This host is missing a critical security update according to Microsoft Bulletin MS10-094. OpenVAS Vulnerability Test $Id: secpodms10-094.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Media Decompression Remote Code Execution Vulnerability 2447961 Authors: Veerendra GG Copyright c 2010 SecPod...
Bo Yin technology management system 1 7, then storm latest oday-vulnerability warning-the black bar safety net
The original vulnerability: GG search inurl:cpzs. asp? ProClass= The root directory under /manage/Product/addnews. asp Content just to write the thumbnail upload there the asp of the horse After the submission of the to the EDIT to find that the asp name Structure http:// 网址 /UpLoadPic/ProPic/ 上传...