5823 matches found
WordPress Domain Mapping System – Manage Unlimited Domains on your Site Plugin < 1.9.3 is vulnerable to Cross Site Scripting (XSS)
Software Domain Mapping System – Manage Unlimited Domains on your Site Type Plugin Vulnerable versions 1.9.3 Fixed in 1.9.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...
Vault.sponsor may take away the prize chance from the receiver.
Lines of code Vulnerability details Impact TwabController.delegateBalance is related to the probability to get the prize, and Vault.sponsor can make the others' delegateBalance to 0. A malicious user can send a small amount of assets to every depositor and be the only prize taker. Proof of Concep...
The vulnerability of the virtualization management tool used in the Podman-machine software for managing and launching OCI containers allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Podman-machine management tool, a software solution for managing and starting OCI containers, relates to insufficient protection of sensitive data due to the redirection of host ports to virtual machine ports during the process of mapping ports using gvproxy. Exploiting...
ds._proposals mapping is never updated when a new proposal is created via propose() in NounsDAOV3Proposals.sol
Lines of code Vulnerability details Impact in function propose, after a new proposal is created, the ds.proposals variable in storage is never updated. Natspec comments for StorageV3 struct definition in NounsDAOInterfaces.sol says that ds.proposals is a mapping that contains references to all...
The LybraRETHVault.depositEtherToMint doesn't keep record of user's ether deposits which results in loss for the user.
Lines of code Vulnerability details Impact High: User will lose his deposited ether. Proof of Concept The collateralAsset address variable which is used in LybraPeUSDVaultBase is assumed to be stETH token address Now the depositEtherToMint function from contract LybraRETHVault.sol which inherits...
NETGEAR RAX30 UPnP Command Injection Vulnerability
The NETGEAR RAX30 is a wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that stems from a command injection vulnerability when processing UPnP port mapping requests, which can be exploited by an attacker to execute arbitrary commands...
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of UPnP port mapping requests. The issue results from the...
Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code Execution
Multiple SQL injection vulnerabilities have been disclosed in Gentoo Soko that could lead to remote code execution RCE on vulnerable systems. "These SQL injections happened despite the use of an Object-Relational Mapping ORM library and prepared statements," SonarSource researcher Thomas...
SUSE-SU-2023:2581-1 Security update for salt
This update for salt fixes the following issues: - Update to Salt release version 3006.0 jscPED-4361 See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add python3-looseversion as new dependency...
PT-2023-36197 · Unknown +1 · Python-Pyzmq +1
Name of the Vulnerable Software and Affected Versions: salt versions prior to 3006.0 python-pyzmq versions prior to 17.1.2 Description: The update for salt and python-pyzmq fixes several issues, including collections Mapping issues, conflicts with Salt dependencies versions, and failures due to t...
PT-2023-36196 · Salt · Salt
Name of the Vulnerable Software and Affected Versions: salt versions prior to 3006.0 Description: The issue is related to several problems in the salt software, including collections Mapping issues, conflicts with dependencies, and failures due to the unavailability of the transactional update...
Contact Form by WD <= 1.13.23 - Admin+ SQLi
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin PoC 1. When editing a form, go to "Settings MySQL Mapping". 2. Click "Add a Query" 3. When mapping the form to the...
Contact Form by WD <= 1.13.23 - Admin+ SQLi
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin 1. When editing a form, go to "Settings MySQL Mapping". 2. Click "Add a Query" 3. When mapping the form to the database in...
Missing Authorization
com.liferay.dynamic.data.mapping.form is vulnerable to Missing Authorization. The vulnerability exists in the dynamic data mapping because it does not limit the document and Media files which can be downloaded from a form, allowing an attacker to download any file from Document and Media via a...
Strava heatmap loophole may reveal users' home addresses
Researchers at NC State University have outlined potential privacy issues with popular fitness app Strava which could lead to users' homes being pinpointed. The researchers' findings are detailed in a paper called Heat marks the spot: de-anonymising users' geographical data on the Strava heat map...
CVE-2022-40507
Memory corruption due to double free in Core while mapping HLOS address to the list...
CVE-2022-40529
Memory corruption due to improper access control in kernel while processing a mapping request from root process...
CVE-2022-33307
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed...
