6662 matches found
Open redirect
An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to redirect users to an arbitrary location if they trust the URL...
WP All Import < 3.6.8 - Admin+ Arbitrary File Upload
The plugin accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE As an admin upload a php file containing the palyload zipped along with a valid XML...
Parallels Access Agent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Desktop...
GitLab 输入验证错误漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. An input validation error vulnerability exists in GitLab EE/CE versions 11.1...
CVE-2022-33995
A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location...
Path traversal
A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location...
CVE-2022-33995
A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location...
Phoenix Contact ProConOS and MULTIPROG
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Phoenix Contact Equipment: ProConOS/ProConOS eCLR and MULTIPROG Vulnerability: Insufficient Verification of Data Authenticity CISA is aware of a public report, known as “OT:ICEFALL” that details...
Malicious code in sc-location (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53a18d567459c5ece1b8f35fdb56b6fa60f4a13c6ceff898fbb82c7cb0d7ff80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OSIPs - Gathers All Valid IP Addresses From All Text Files From A Directory, And Checks Them Against Whois Database, TOR Relays And Location
This script scans every file from a given folder recursively, extracts every IPv4 and IPv6 address, filters out the public IP addresses and then queries these IPs against TOR relays, WhoIs service and Location service. It outputs 4 files: a CSV file and a JSON file with all details of the IP...
CVE-2021-42735
Adobe Photoshop version 22.5.1 and earlier versions is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
CVE-2021-42735
Adobe Photoshop version 22.5.1 and earlier versions is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
CVE-2021-42735 Adobe Photoshop Memory Corruption could lead to Arbitrary code execution
Adobe Photoshop version 22.5.1 and earlier versions is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
CVE-2021-40727
Access of Memory Location After End of Buffer CWE-788...
CVE-2021-42732
Access of Memory Location After End of Buffer CWE-788...
Buffer overflow
Access of Memory Location After End of Buffer CWE-788...
CVE-2021-42732 Adobe InDesign crashes when parsing the GIF file
Access of Memory Location After End of Buffer CWE-788...
CVE-2021-42732
CVE-2021-42732 is linked to Adobe InDesign and is described as Access of Memory Location After End of Buffer (CWE-788). Connected documents indicate this issue is part of the APSB21-107 advisory affecting InDesign versions prior to 17.0.0 (notably 16.x and earlier). The CVSSv3.1 data from the NVD...
CVE-2021-40727
Adobe InDesign (Windows/macOS) versions prior to 16.4.0 are affected by CVE-2021-40727 (Access of Memory Location After End of Buffer) as part of APSB21-73. The issue, triggered during parsing of TIFF input, is described across multiple third‑party advisories as a boundary/overflow condition that...