Open Asset Import Library 缓冲区错误漏洞

The Open Asset Import Library is a library for importing and exporting various 3d model formats, including scene post-processing to generate missing render data. A security vulnerability exists in Open Asset Import Library aka assimp 5.1.0 and 5.1.1, which stems from a heap-based buffer overflow ...

CVE-2021-45948

Open Asset Import Library (assimp) versions 5.1.0 and 5.1.1 contain a heap-based buffer overflow in _m3d_safestr (invoked by m3d_load and Assimp::M3DWrapper::M3DWrapper). Exploitation status is not described in the provided documents. The vulnerability Consists of a memory corruption risk in the ...

Learning Courses < 5.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape the Email PDT identity token settings, which could allow high privilege users to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Visit to Paypal Setting Under Learning Plugin Enter the XSS payload " in Email PDT...

CVE-2021-45896

Nokia FastMile 3TG00118ABAD52 devices allow privilege escalation by an authenticated user via isctcadmin=1 to loginwebapp.cgi and use of Import Config File...

CVE-2021-45896

Nokia FastMile 3TG00118ABAD52 devices allow privilege escalation by an authenticated user via isctcadmin=1 to loginwebapp.cgi and use of Import Config File...

CVE-2021-45896

Nokia FastMile 3TG00118ABAD52 devices allow privilege escalation by an authenticated user via isctcadmin=1 to loginwebapp.cgi and use of Import Config File...

Privilege escalation

Nokia FastMile 3TG00118ABAD52 devices allow privilege escalation by an authenticated user via isctcadmin=1 to loginwebapp.cgi and use of Import Config File...

CVE-2021-45896

Nokia FastMile 3TG00118ABAD52 devices allow privilege escalation by an authenticated user via isctcadmin=1 to loginwebapp.cgi and use of Import Config File...

Nokia FastMile 3TG00118ABAD52 安全漏洞

Nokia FastMile 3TG00118ABAD52 is a fixed wireless access from Nokia, Finland. A security vulnerability exists in the Nokia FastMile 3TG00118ABAD52 device due to an issue with the software's admin privilege setting, which allows an authenticated user with privilege escalation to log in to web...

PT-2021-24309 · Nokia · Nokia Fastmile

Name of the Vulnerable Software and Affected Versions: Nokia FastMile 3TG00118ABAD52 devices affected versions not specified Description: The issue allows an authenticated user to escalate privileges. This is achieved by setting is ctc admin=1 and accessing the login web app.cgi endpoint, followe...

OPENSUSE-SU-2021:1624-1 Security update for libaom

This update for libaom fixes the following issues: - CVE-2020-36129: Fixed stack buffer overflow via the component src/aomimage.c bsc1193356. - CVE-2020-36131: Fixed stack buffer overflow via the component stats/ratehist.c bsc1193365. - CVE-2020-36135: Fixed NULL pointer dereference via the...

CVE-2021-45474

In MediaWiki through 1.37, the Special:ImportFile URI aka FileImporter allows XSS, as demonstrated by the clientUrl parameter...

PT-2021-24246 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.37 Description: The issue concerns a problem where the Special:ImportFile URI, also known as FileImporter, in MediaWiki allows for cross-site scripting XSS attacks. This is demonstrated through the clientUrl...

CVE-2021-44548

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB...

PT-2021-24132 · Apache · Apache Solr

Name of the Vulnerable Software and Affected Versions: Apache Solr versions prior to 8.11.1 Description: An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path, resulting in an SMB network call being made from the Solr host ...

Import source configuration information is leaked via the Insight Import Source feature - CVE-2021-43950

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view import source configuration information via a Broken Access Control vulnerability in the Insight Import Source feature. The affected versions are before version 4.21.0...

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Description pimcore is vulnerable to Stored Cross-Site Scripting in the name field via the import functionality. Steps to reproduce: 1. Navigate to settings -- Data Objects -- Objectbricks 2. ave the following data as JSON file and import it: json "classDefinitions": , "key": null, "parentClass":...

PatrOwl privilege management error vulnerability

PatrOwl is a scalable, free and open source solution for orchestrating secure operations. patrOwl is vulnerable to a privilege management error, which could be exploited by an attacker to download all lookup import files...

CVE-2021-43828

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management IDOR has been found in PatrowlManager. All imports findings file is placed under /media/imports// In that, ownerid is predictable and tmpfile is in format o...

Jektor - A Windows User-Mode Shellcode Execution Tool That Demonstrates Various Techniques That Malware Uses

This utility focuses on shellcode injection techniques to demonstrate methods that malware may use to execute shellcode on a victim system Dynamically resolves API functions to evade IAT inclusion Includes usage of undocumented NT Windows API functions Supports local shellcode execution via...