17766 matches found
rock-interviews.com Cross Site Scripting vulnerability OBB-3864550
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Incorrect Default Permissions
apache-airflow is vulnerable to Incorrect Default Permissions. The vulnerability is due to authenticated Ops and Viewers users being able to view all information on audit logs, including DAG names and usernames they were not permitted to view...
CVE-2024-22463
Dell PowerScale OneFS versions 8.2.x through 9.6.0.x are affected by a vulnerability described as the use of a broken or risky cryptographic algorithm, which can lead to disclosure and integrity concerns for sensitive data. The issue is triggered by the software’s cryptographic implementation rat...
A-PDF All to MP3 Converter 2.0.0 - DEP Bypass via HeapCreate + HeapAlloc Exploit
!/usr/bin/python Exploit Title: A-PDF All to MP3 Converter 2.0.0 - DEP Bypass with HeapCreate + HeapAlloc + somememorycopyfunction ROP chain Date: 16 November 2023 Exploit Author: George Washington Vendor Homepage: http://www.a-pdf.com/all-to-mp3/download.htm Software Link:...
ishraqa.unizwa.edu.om Cross Site Scripting vulnerability OBB-3864112
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-1449
CVE-2024-1449 relates to the Master Slider – Responsive Touch Slider WordPress plugin. It is vulnerable to a Stored Cross-Site Scripting (XSS) via the ms_slide shortcode in all versions up to and including 3.9.5, caused by insufficient input sanitization and output escaping on user-supplied attri...
CVE-2021-47080
CVE-2021-47080 pertains to the Linux kernel RDMA core. Affected: Linux kernel builds where user_entry_size is supplied by the user and later used as a denominator to compute the number of entries. If the user supplies 0, a divide-by-zero triggers a kernel panic (observed in ib_uverbs_handler_UVER...
CVE-2021-47078
Concrete details available: CVE-2021-47078 affects the Linux kernel’s RDMA/rxe driver. The flaw occurs in rxe_qp_do_cleanup() when rxe_qp_from_init() has failed, causing QP fields to be garbage-collected and leading to a refcount underflow and a use-after-free condition. This can enable local exp...
CVE-2024-24904
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contains a Stored Cross-Site Scripting vulnerability. An adjacent network, high-privileged attacker could store malicious HTML/JavaScript in a trusted data store, causing the browser to execute code in the vulnerable web app context,...
CVE-2024-26280
Apache Airflow versions prior to 2.8.2 are vulnerable to an information disclosure flaw due to incorrect default permissions (CWE-276). This allows authenticated Ops and Viewers users to view comprehensive audit log information, including DAG names and usernames , which they are not otherwise per...
CVE-2021-47060
creationtimestamp| type| source ---|---|--- 2024-03-01 00:26:18+00:00| seen| https://t.me/ctinow/197155 2024-03-01 06:51:50+00:00| seen| https://t.me/ctinow/197325...
PUB-A-289507739
Bulletin has no description...
CVE-2024-1977
The CVE-2024-1977 entry concerns the Restaurant Solutions – Checklist plugin for WordPress (v1.0.0) with Stored XSS due to insufficient input sanitization and output escaping. The vulnerability affects multisite installations and sites where unfiltered_html is disabled. Exploitation requires auth...