Malicious code in discord-lofy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6da36b0b3006a9ff75f70fc9009bc0db14bda47187f464e3b9be5d138b67e1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-8464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the loop driver, where the lo device stored in the gendisk private data may not be valid until the gendisk ...

PT-2021-7988

Name of the Vulnerable Software and Affected Versions Emerson Dixell XWEB-500 affected versions not specified Description The issue is related to an arbitrary file write vulnerability in the /cgi-bin/logo extra upload.cgi, /cgi-bin/cal save.cgi, and /cgi-bin/lo utils.cgi API endpoints. This...

SQL Injection Vulnerability in Lo***.aspx Page of JunCheng Online Exam System

Jun Cheng Online Exam System is a B/S based online exam system. SQL injection vulnerability exists in the Lo.aspx page of JunCheng Online Exam System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Smart Meter Collective Reading Management System Lo***.aspx Page

Qingdao Automatic Instrumentation Co., Ltd. is a new joint-stock enterprise integrating R&D and manufacturing. There is a SQL injection vulnerability in the Lo.aspx page of the Intelligent Instrumentation Collector Management System, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Lo***.aspx Page of Integrated Water Supply Management Platform

Wuhan Jinshuilai Technology Development Co., Ltd. is a high-tech enterprise specializing in water management informationization, automation and intelligent construction. There is a SQL injection vulnerability in the Lo.aspx page of the integrated water management platform, which can be exploited ...

CloudYou CMS enterprise website management system Lo***.php file exists arbitrary file deletion vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. There is an arbitrary file deletion vulnerability in the Lo.php file of the YUNUCMS enterprise website management system. An attacker ca...

kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service

A flaw was found in the Linux kernel's handling of loopback devices. An attacker, who has permissions to setup loopback disks, may create a denial of service or other unspecified actions...

PT-2018-6643

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description: The issue is related to improper input validation for fix...

PT-2018-16911

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.13 Description The issue is related to the mishandling of lo release serialization in the Linux kernel, which can be exploited by attackers to cause a denial of service or possibly have other unspecified...

PT-2017-2778

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 9.4.13 PostgreSQL versions prior to 9.5.8 PostgreSQL versions prior to 9.6.4 Description The issue is caused by a flaw in the authorization procedure, allowing remote authenticated attackers with no privileges on a...

USN-3082-2: Linux kernel (OMAP4) vulnerability

Chiachih Wu, Yuan-Tsung Lo, and Xuxian Jiang discovered that the legacy ABI for ARM OABI had incomplete access checks for epollwait2 and semtimedop2. A local attacker could use this to possibly execute arbitrary code...

Oracle: Security Advisory (ELSA-2013-1348)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lo-gs.com XSS vulnerability

Open Bug Bounty ID: OBB-80572 Description| Value ---|--- Affected Website:| lo-gs.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

JTL-Shop 2 SQL Injection

JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vb + www.sec-eviles.com/vb email : [email protected] Dork :" Powered by JTL-Shop 2" exp : http://server/Path/druckansicht.php?s=13 and 1=2 union select 1,2,3,4,5,concatcName,0x3a,cPass,7,8,9 from tadminlogin-...

JTL-Shop 2 - druckansicht.php SQL Injection

JTL-Shop 2 - druckansicht.php SQL Injection JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vb + www.sec-eviles.com/vb email : [email protected] Dork :" Powered by JTL-Shop 2" exp : http://server/Path/druckansicht.php?s=13 and 1=2 union select...

JTL-Shop 2 - 'druckansicht.php' SQL Injection

JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vb + www.sec-eviles.com/vb email : [email protected] Dork :" Powered by JTL-Shop 2" exp : http://server/Path/druckansicht.php?s=13 and 1=2 union select 1,2,3,4,5,concatcName,0x3a,cPass,7,8,9 from tadminlogin-...

Xpoze Pro (home menù) <= Blind $ql Injection

No description provided by source. ■ Xpoze Pro home menù = Blind $ql Injection --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.xpoze.org/ --------------------------------------- ■ ExPL0iT:...

Xpoze 4.10 - menu Blind SQL Injection

Xpoze 4.10 - menu Blind SQL Injection ■Xpoze Pro home menù --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.xpoze.org/ --------------------------------------- Str0ke Il pavimentosibillaLo...

a4deskphp-rfi.txt

================================================================= ========A4Desk PHP Event Calendar Remote File Inclusion======== ================================================================= Vendor: WebUnion Media Ltd Vendor Site: http://php.a4desk.com/calendar/ Date Discovered: 9-29-08...