FFmpeg 代码问题漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg, which stems from a lack of return value checking in the decodemainheader function in the libavformat/nutdec.c file and triggers a null...

CVE-2023-22959

WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php txtFirstName, txtLastName...

MAL-2023-570 Malicious code in lmru-pilot-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5400ae4d52a51cbdb5bde86e4f8e0288cd78770f7bedde56212581beb69498ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lmru-pilot-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5400ae4d52a51cbdb5bde86e4f8e0288cd78770f7bedde56212581beb69498ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2023-0133

Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. Chromium security severity: Medium...

CVE-2015-10028

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

Cross site scripting

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2015-10028 ss15-this-is-sparta Main Page roomElement.js cross site scripting

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2015-10028 ss15-this-is-sparta Main Page roomElement.js cross site scripting

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2015-10028

CVE-2015-10028 concerns the ss15-this-is-sparta project, specifically the Main Page component’s file js/roomElement.js . The available documents describe a cross-site scripting (XSS) vulnerability arising from manipulation of that file, with exploitation described as remote. The patch identified ...

CVE-2015-10023 Fumon trello-octometric srv.go main sql injection

A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/server/srv.go. The manipulation of the argument num leads to sql injection. The patch is named a1f1754933fbf21e2221fbc671c81a47de6a04ef. It is recommended to app...

PT-2023-10202 · Unknown · Fumon Trello-Octometric

Name of the Vulnerable Software and Affected Versions: Fumon trello-octometric affected versions not specified Description: A critical issue has been found in Fumon trello-octometric, affecting the main function of the file metrics-ui/server/srv.go. The manipulation of the num argument leads to s...

Pear Programming 跨站脚本漏洞

Pear Programming is a project developed into a global hackathon by the individual developer Mauricio Soares. Pear Programming suffers from a cross-site scripting vulnerability that stems from an issue with unknown code in the js/roomElement.js file in the component Main Page, which can lead to...

PT-2023-10207 · Unknown · Ss15-This-Is-Sparta

Name of the Vulnerable Software and Affected Versions: ss15-this-is-sparta affected versions not specified Description: A vulnerability has been found in the component Main Page, specifically affecting the file js/roomElement.js. The manipulation leads to cross site scripting. The attack can be...

aXMLRPC XML External Entity vulnerability

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.12.1 is able...

PT-2023-10106 · Unknown · Drybjed Ansible-Ntp

Name of the Vulnerable Software and Affected Versions: drybjed ansible-ntp affected versions not specified Description: A problematic vulnerability has been found in drybjed ansible-ntp, affecting some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control...

PT-2022-7787 · Unknown · Valtech Idp Test Client +1

Name of the Vulnerable Software and Affected Versions: valtech IDP Test Client affected versions not specified Description: A vulnerability was found in the valtech IDP Test Client, classified as problematic, and affects some unknown functionality of the file python-flask/main.py. The manipulatio...

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. FlatPress is vulnerable to a cross-site scripting vulnerability that stems from some unknown processing issues in the component Setupsetup/lib/main.lib.php file that can lead to...

PT-2022-9020 · Unknown · Destiny.Gg Chat

Name of the Vulnerable Software and Affected Versions: destiny.gg chat affected versions not specified Description: A vulnerability was found in the destiny.gg chat, affecting the function websocket.Upgrader of the file main.go. The manipulation leads to cross-site request forgery, and the attack...

CVE-2022-3186

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to...