17641 matches found
CVE-2020-29050
CVE-2020-29050 affects SphinxSearch in Sphinx Technologies Sphinx up to version 3.1.1, enabling directory traversal via the mysql client for CALL SNIPPETS and load_file with full pathnames (unrelated to CMUSphinx). The issue, often discussed with CVE-2019-14511, has been addressed in multiple Lin...
CVE-2021-46148
MediaWiki prior to 1.35.5, 1.36.x prior to 1.36.3, and 1.37.x prior to 1.37.1 contains a CSRF flaw related to MassEditRegex that can be triggered by unprivileged users on testwiki SecurePoll instances. Affected software: MediaWiki; vulnerable component/function: MassEditRegex handling that enable...
in lquixada/cross-fetch
BUG ====== Cookie header leaked to third party site and it allow to hijack victim account SUMMURY ============ When fetching a remote url with Cookie if it get Location response header then it will follow that url and try to fetch that url with provided cookie . So cookie is leaked here to...
CVE-2022-22707
CVE-2022-22707 affects lighttpd 1.4.46–1.4.63 via the mod_extforward_Forwarded function, causing a stack-based buffer overflow (4-byte boundary) that can lead to remote denial of service. The issue is more likely on 32-bit systems and occurs in non-default Forwarded header handling. Connected adv...
Virtual Airlines Manager 2.6.2 - (multiple) SQL Injection Vulnerability
Exploit Title: Virtual Airlines Manager 2.6.2 - 'multiple' SQL Injection Google Dork: Powered by Virtual Airlines Manager v2.6.2 Exploit Author: Milad Karimi Vendor Homepage: http://virtualairlinesmanager.net Software Link: https://virtualairlinesmanager.net/index.php/vam-releases/ Version: 2.6.2...
Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch
BUG ====== Cookie header leaked to third party site and it allow to hijack victim account SUMMURY ============ When fetching a remote url with Cookie if it get Location response header then it will follow that url and try to fetch that url with provided cookie . So cookie is leaked here to...
Daybyday CRM 处理逻辑错误漏洞
DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. An information disclosure vulnerability exists in DayByDay CRM. The vulnerability stems from the product's update feature that does not...
motoranch.cz Cross Site Scripting vulnerability OBB-2321989
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ASB-A-193070556
Bulletin has no description...
CVE-2021-45928
CVE-2021-45928 affects libjxl as used in libvips 8.11–8.11.2, with an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections ). The vulnerability is caused by an out-of-bounds ...
CVE-2021-20133
The CVE-2021-20133 entry concerns the D-Link DIR-2640 router (Quagga Services) with versions up to 1.11B02, vulnerable to an absolute path traversal. The issue allows a remote, authenticated attacker to set the MOTD banner to an arbitrary file, enabling disclosure of sensitive data such as hashed...
GSD-2021-1002803 IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
IB/qib: Fix memory leak in qibusersdmaqueuepkts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.89 by commit...
CVE-2021-36723
CVE-2021-36723 affects Emuse - eServices / eNvoice (Amios). The connected records describe a vulnerability caused by lack of identification mechanisms and predictable IDs, enabling an attacker to scrape all files and expose private personal information. Public sources (NVD/CNVD/etc.) reiterate ex...
Printchaser 安全漏洞
Printchaser is a solution from Informer Technologies that enables companies to sense and track the dangers of unauthorized information outflow by applying print log management and monitoring as well as inserting watermarks into printouts from office PCs. Printchaser has a security vulnerability...
CVE-2021-35232
creationtimestamp| type| source ---|---|--- 2021-12-27 22:23:24+00:00| seen| https://t.me/cibsecurity/34694 2025-07-31 21:02:20+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvbzuiq3dm2f 2026-06-23 14:06:17+00:00| exploited|...
CVE-2021-43548
creationtimestamp| type| source ---|---|--- 2021-12-27 22:23:18+00:00| seen| https://t.me/cibsecurity/34689...
U.S. Dept Of Defense: CUI Labelled document out in the open
Hi DoD VDP, I have found a document and each page of it is marked CUI : "Controlled Unclassified Information". According to your standards, this file shouldn't be publicly available on internet. This document was last edited on █████████ 2021. My investigation leads me to think it could have been...
CVE-2020-36511
CVE-2020-36511 affects the Rust bite crate (through 2020-12-31). The issue is in read::BiteReadExpandedExt::read_framed_max, which may read from uninitialized memory, causing undefined behavior/memory corruption. Multiple connected sources (NVD/NVD-derived entries, RustSec advisories, OSV entries...