23 matches found
Malicious code in kamasada-nutai-kd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a9cc780f64e03433c4b76c2dec895fa4aa43080ffefa1bca9f1b2715006a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2023-50817
Malicious code in bioql PyPI...
CVE-2023-46615
Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7...
kd-problem.ucoz.ru Cross Site Scripting vulnerability OBB-3857408
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-46615
Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7...
CVE-2023-46615
CVE-2023-46615 affects the WordPress KD Coming Soon plugin. Multiple sources confirm a PHP Object Injection (deserialization of untrusted data) vulnerability in KD Coming Soon <= 1.7, with unauthenticated access. One document notes a potential code execution path if a POP chain exists with oth...
CVE-2023-46615 WordPress KD Coming Soon Plugin <= 1.7 is vulnerable to PHP Object Injection
Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7...
WordPress Plugin KD Coming Soon Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
Exploit for Deserialization of Untrusted Data in Kallidan Kd_Coming_Soon
CVE-2023-46615 KD Coming Soon = 1.7 - Unauthenticated PHP...
PT-2023-30113 · Unknown · Kalli Dan Kd Coming Soon
Name of the Vulnerable Software and Affected Versions: Kalli Dan KD Coming Soon versions 1.7 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security risks, as deserializing untrusted data can allow an attacker to execute...
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle
Description The KD Coming Soon plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7 via deserialization of untrusted input cetitle in the vulnerable kdcemailer function. This makes it possible for unauthenticated attackers to inject a PHP Object. No...
kd-germany.de Improper Access Control vulnerability OBB-3765169
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress KD Coming Soon Plugin <= 1.7 is vulnerable to PHP Object Injection
Software KD Coming Soon Type Plugin Vulnerable versions = 1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-46615 Patch priority High CVSS severity High 5.4 Developer Claim ownership PSID 340885e1964a Credits Mika Required privilege Unauthenticated...
BugChecker - SoftICE-like Kernel Debugger For Windows 11
Introduction BugChecker is a SoftICE-like kernel and user debugger for Windows 11 and Windows XP as well: it supports Windows versions from XP to 11, both x86 and x64. BugChecker doesn't require a second machine to be connected to the system being debugged, like in the case of WinDbg and KD. This...
CVE-2022-20015
In kdcamerahw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862966; Issue ID: ALPS05862966...
CVE-2022-20015
In kdcamerahw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862966; Issue ID: ALPS05862966...
PT-2022-14261 · Unknown · Kd Camera Hw Driver
Name of the Vulnerable Software and Affected Versions: kd camera hw driver affected versions not specified Description: The issue is related to a possible information disclosure in the kd camera hw driver due to uninitialized data. This could lead to local information disclosure, requiring System...
MediaTek 芯片安全漏洞
MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in the MediaTek kdcamerahw driver, which originates from a possible information disclosure in the kdcamerahw driver due to uninitialized data. This could result in the...
There are logic flaws and vulnerabilities in the IoT smart water meter supervisory platform of Shandong KD Electronics Co.
Ltd. is a national high-tech enterprise and national high-tech zone gazelle enterprise integrating product development, production, sales and teaching practice. There is a logic flaw vulnerability in the Internet of Things IoT Smart Water Meter Supervision Platform of Shandong KDE Electronics Co...
kd-event.de XSS vulnerability
Open Bug Bounty ID: OBB-644947 Description| Value ---|--- Affected Website:| kd-event.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...