17612 matches found
CVE-2022-28073
Radare2 contains a use-after-free in the r_reg_set_value function affecting versions 5.4.0 and 5.4.2. The issue is described as a post-release reuse problem in r_reg_set_value, with no publicly documented fix in the provided sources. Exploit details, affected platforms, and remediation steps are ...
CVE-2020-21428
CVE-2020-21428 affects FreeImage (library for graphics image formats). The vulnerability is a buffer overflow in function LoadRGB in PluginDDS.cpp, triggered by crafted image files, enabling remote code execution. Evidence across multiple advisories confirms FreeImage-related CVEs (including CVE-...
CVE-2023-39026
CVE-2023-39026 affects FileMage Gateway Windows Deployments v1.10.8 and earlier. The issue is a Directory Traversal in the /mgmt/ component that allows a remote attacker to obtain sensitive information. Public PoCs/exploits exist (PacketStorm and Exploit-DB references) demonstrating LFI-style acc...
OVOO Movie Portal CMS 3.3.3 SQL Injection
Exploit Title: OVOO Movie Portal CMS v3.3.3 - SQL Injection Date: 2023-08-12 Exploit Author: Ahmet Ümit BAYRAM Vendor: https://codecanyon.net/item/ovoomovie-video-streaming-cms-with-unlimited-tvseries/20180569 Tested on: Kali Linux & MacOS CVE: N/A Request POST /filtermovies/1 HTTP/2 Host:...
CVE-2020-24113
The CVE-2020-24113 entry describes a Directory Traversal vulnerability in the Contacts File Upload Interface of Yealink W60B (firmware version 77.83.0.85). The underlying issue is a path traversal flaw that can let an attacker access sensitive information and may cause a denial of service. The av...
CVE-2023-40735
CVE-2023-40735 concerns an exposure of sensitive information to an unauthorized actor in the BUTTERFLY BUTTON project (Butterfly Button). The issue is described as an architecture flaw that can compromise confidentiality and plausible deniability. The CVSS 3.1 metrics (NVD and CNA sources) assign...
CVE-2022-46751
CVE-2022-46751: Apache Ivy is vulnerable to XML External Entity (XXE) or XML injection due to improper restriction of DTD processing. Affected versions: Ivy prior to 2.5.2. Root cause: parsing XML files (Ivy config, Ivy files, POMs) can download external DTDs and expand entities, enabling data ex...
Color Prediction Game v1.0 - SQL Injection
Exploit Title: Color Prediction Game v1.0 - SQL Injection Date: 2023-08-12 Exploit Author: Ahmet Ümit BAYRAM Vendor: https://www.codester.com/items/44411/color-prediction-game-php-script Tested on: Kali Linux & MacOS CVE: N/A Request POST /loginNow.php HTTP/1.1 Host: localhost Cookie:...
CVE-2023-34214
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-generation function, which could potentially allow malicious...
CVE-2023-4387
CVE-2023-4387 affects VMware’s vmxnet3 Ethernet NIC driver in the Linux kernel. A use-after-free in vmxnet3_rq_alloc_rx_buf can lead to a double-free during vmxnet3_rq_cleanup_all, causing a system crash and, per advisory text, kernel information leakage. The issue is publicly documented in Nessu...
CVE-2023-27539
creationtimestamp| type| source ---|---|--- 2023-08-16 15:18:02+00:00| seen| https://t.me/ctinow/130895 2024-05-18 11:01:58+00:00| seen| https://t.me/criticalbug/1137 2025-01-09 00:56:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113795675438289340 2025-01-09 01:14:28+00:00|...
Code injection
The webhook endpoint in Jenkins Gogs Plugin 1.0.15 and earlier provides unauthenticated attackers information about the existence of jobs in its output...
SQL Injection Vulnerability in Leadsec ACM of Netnifty Internet Behavior Management System of Beijing Netnifty Information Technology Co.
Beijing NetGuard Nebula Information Technology Company is a leading enterprise in the domestic information security industry, specializing in the research and development, production and sales of information security products, and providing hierarchical overall security solutions and security...
medrandoxuntos.es Cross Site Scripting vulnerability OBB-3585973
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-9C9V-W225-V5RG Ghost vulnerable to arbitrary file read via symlinks in content import
Impact A vulnerability in Ghost allows authenticated users to upload files which are symlinks. This can be exploited to perform an arbitrary file read of any file on the operating system. Site administrators can check for exploitation of this issue by looking for unknown symlinks within Ghost's...
CVE-2023-39438 Missing Authorization check allows certain operations on CLA Assistant data
A missing authorization check allows an arbitrary authenticated user to perform certain operations through the API of CLA-assistant by executing specific additional steps. This allows an arbitrary authenticated user to read CLA information including information of the persons who signed them as...
CVE-2023-38840
CVE-2023-38840 affects Bitwarden Desktop versions 2023.7.0 and earlier. The vulnerability allows a local attacker to obtain sensitive information via the Bitwarden.exe process. The description and connected sources confirm a local-access information disclosure vector, but the documents do not spe...
CVE-2023-21267
The CVE-2023-21267 issue affects Android’s KeyguardViewMediator.java in the framework, enabling bypass of lockdown mode via screen pinning due to a logic error. This leads to local information disclosure without extra privileges or user interaction. Exploitation can occur on devices with access t...