The vulnerability of the ntfs_mft_rec_alloc function in the NTFS file system, which allows a hacker to execute arbitrary code with elevated privileges through the FUSE NTFS-3G module.

The vulnerability of the ntfsmftrecalloc function in the NTFS file system relates to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created NTFS image file...

Malicious code in sfdc-aem-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e730d8656ba56075221c46c0267a587f2f6c60648a4455dc9079ca7fee30dd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6046 Malicious code in sfdc-aem-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e730d8656ba56075221c46c0267a587f2f6c60648a4455dc9079ca7fee30dd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @btu-tools/master-builder-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e07685a4efcdb5e424d70ac614fd3402125bf3ba2389876ea7ce6d6cf37486a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-155 Malicious code in @btu-tools/master-builder-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e07685a4efcdb5e424d70ac614fd3402125bf3ba2389876ea7ce6d6cf37486a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-cron-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae251f427512a885e950ac70e8039b90f8ef6d22e8393886461f599805dc0688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-cron-master1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1116bb33470ca9581591802dcf0769f1108fc3116f737866e526ea461a13b237 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4882 Malicious code in node-cron-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae251f427512a885e950ac70e8039b90f8ef6d22e8393886461f599805dc0688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31912

Online Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f=deleteteam...

CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

CVE-2022-31913

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

Online Fire Reporting System 跨站脚本漏洞

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. Online Fire Reporting System v1.0 is vulnerable to a cross-site scripting vulnerability that originates in /ofrs/classes/Master.php due to a lack of data validation of user-supplied The...

PT-2022-20985 · Unknown · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/odfs/classes/Master.php?f=delete team" API endpoint. This allows for potential unauthorized access and manipulation of database...

Online Tutor Portal Site 跨站脚本漏洞

Online Tutor Portal Site is an online tutor portal. It is used to provide an online platform for individuals who are looking for and offering tutoring services. A cross-site scripting vulnerability exists in Online Tutor Portal Site version v1.0, which stems from a lack of filtering and escaping ...

Online Tutor Portal Site SQL注入漏洞

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. A SQL injection vulnerability exists in Online Tutor Portal Site v1.0, which originates from /otps/classes/Master.php?f=deleteteam missing SQL data filter escaping. An attacker could use this vulnerability to execute...

ok-file-formats 安全漏洞

ok-file-formats is an open source decoder for PNG, JPEG, WAV and some other file formats. A security vulnerability exists in ok-file-formats master version 2021-9-12, which stems from a buffer overflow issue in okjpgconvertdataunitgrayscale and okjpgconvertYCbCrtoRGB...

CVE-2022-32358

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteinquiry...

master-technology.com Cross Site Scripting vulnerability OBB-2650587

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-32328

Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f=deleteimg...

Couchbase Server 信息泄露漏洞

Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase USA, which mainly supports data query, full-text search and active global replication. couchbase Server is vulnerable to an information disclosure vulnerability, which originates from couchbase-cli that...