Sports-Club-Management-System 安全漏洞

Sports-Club-Management-System is a sports club management system by Shreyansh Gupta, an individual developer. A security vulnerability exists in Sports-Club-Management-System, which stems from an affected unknown section of the file admin/makepayments.php, where manipulation of the parameter...

Fedora: Security Advisory for golang-github-task (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-github-magefile-mage (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in make-discord-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52967aaafb09541efff266ef4add48f8dc22272474b7430059b3e44d3602989c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4464 Malicious code in make-discord-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52967aaafb09541efff266ef4add48f8dc22272474b7430059b3e44d3602989c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 35 Update: golang-github-task-3.14.0-2.fc35

A task runner / simpler Make alternative written in Go...

[SECURITY] Fedora 35 Update: golang-github-magefile-mage-1.11.0-5.fc35

A Make/rake-like dev tool using Go...

Fedora: Security Advisory for golang-github-magefile-mage (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-1793: Cross-Site Request Forgery (CSRF)

The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public...

PT-2022-14117

Name of the Vulnerable Software and Affected Versions Private Files WordPress plugin versions 0.40 and earlier Description The issue is related to a missing CSRF check when disabling protection, which could allow attackers to perform a CSRF attack on a logged-in admin, making the blog public...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Root shell PoC for CVE-2021-3156 no brutef...

Null pointer dereference at chafa-pixops.c:95

Description Null pointer dereference in hpjansson/chafa at chafa-pixops.c:95. Build export CFLAGS="-g -O0 -lpthread -fsanitize=address" export CXXFLAGS="-g -O0 -lpthread -fsanitize=address" export LDFLAGS="-fsanitize=address" ./autogen.sh ./configure --disable-shared make POC ./chafa POC POC ASAN...

new packages: make

An update is available for make. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

The vulnerability of the ` PharMakeDirstream` function in the PHP interpreter allows a hacker to trigger a service failure or potentially cause other effects.

The vulnerability of the PharMakeDirstream function in the PHP interpreter relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially have other adverse effects...

CVE-2022-27126

zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php...

CVE-2022-27126

zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php...

zbzcms SQL注入漏洞

zbzcms Station Helper CMS is a content management website of China Station Helper CMS zbzcms Inc. zbzcms version 1.0 has a SQL injection vulnerability, which originates from a SQL injection vulnerability found through the art parameter of /include/make.php. No detailed vulnerability details are...

make-umzuege.de Improper Access Control vulnerability OBB-2411798

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-21672

make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. Starting with version 0.9 and prior to version 1.10, make-ca misinterprets Mozilla certdata.txt and treats explicitly untrusted certificates like trusted ones, causing those explicitly untrusted...

CVE-2022-21672 /etc/pki/tls and /etc/ssl/certs include distrusted certificates in make-ca

make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. Starting with version 0.9 and prior to version 1.10, make-ca misinterprets Mozilla certdata.txt and treats explicitly untrusted certificates like trusted ones, causing those explicitly untrusted...