Missing access control override in BoringFactory

Lines of code Vulnerability details Impact function addBigBang address mc, address contract external onlyOwner registeredBigBangMasterContractmc isMarketRegisteredcontract = true; clonesOfmc.pushcontract; emit RegisterBigBangcontract, mc; allows only onlyOwner to call this function, while deploy ...

PT-2023-4245 · Sap · Sap Supplier Relationship Management

Name of the Vulnerable Software and Affected Versions: SAP Supplier Relationship Management versions 600 through 617 Description: The issue is related to insufficient protection of service data in the SAP Supplier Relationship Management application, specifically in the function for copying basic...

Keeper Security Desktop 16.10.2 / Browser Extension 16.5.4 Password Dumper

Exploit Title: Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping Google Dork: NA Date: 22-07-2023 Exploit Author: H4rk3nz0 Vendor Homepage: https://www.keepersecurity.com/enGB/ Software Link: https://www.keepersecurity.com/enGB/get-keeper.html Version: Desktop App...

Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping

Exploit Title: Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping Google Dork: NA Date: 22-07-2023 Exploit Author: H4rk3nz0 Vendor Homepage: https://www.keepersecurity.com/enGB/ Software Link: https://www.keepersecurity.com/enGB/get-keeper.html Version: Desktop App...

CVE-2023-37980

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gravity Master Custom Field For WP Job Manager plugin = 1.1 versions...

CVE-2023-37980

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gravity Master Custom Field For WP Job Manager plugin = 1.1 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gravity Master Custom Field For WP Job Manager plugin = 1.1 versions...

CVE-2023-37980 WordPress Custom Field For WP Job Manager Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gravity Master Custom Field For WP Job Manager plugin = 1.1 versions...

CVE-2023-37980

CVE-2023-37980 affects the Gravity Master Custom Field For WP Job Manager plugin (WordPress) up to version 1.1. It is an authenticated stored XSS vulnerability exploitable by an administrator (admin+) to inject script via the Custom Field for WP Job Manager. Root cause details in the sources indi...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Comm...

PT-2023-26228 · WordPress · Gravity Master Custom Field For Wp Job Manager

Name of the Vulnerable Software and Affected Versions: Gravity Master Custom Field For WP Job Manager plugin versions = 1.1 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious...

WordPress Quiz And Survey Master Plugin < 8.1.11 is vulnerable to Cross Site Scripting (XSS)

Software Quiz And Survey Master Type Plugin Vulnerable versions 8.1.11 Fixed in 8.1.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3575 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9853dd82cef9 Credits Andreas Damen...

GHSA-QGHV-8H77-699V Duplicate Advisory: Open Babel has out-of-bounds write in MOL2 attribute/value parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vjg6-gm8m-v5g6. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1...

DEBIAN-CVE-2022-41793

An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

DEBIAN-CVE-2022-44451

A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

UBUNTU-CVE-2022-44451

A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-46290

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.The loop that...

PT-2023-14271

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 and prior to the version that includes the fix for this issue Description An out-of-bounds write issue exists in the MOL2 format attribute and value functionality. A specially crafted malformed file can lead to...

PT-2023-6628

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 and master commit 530dbfa3 Description The issue is related to out-of-bounds write vulnerabilities in the ORCA format nAtoms functionality. A specially-crafted malformed file can lead to arbitrary code execution. An...

PT-2023-7022

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 and master commit 530dbfa3 Description The issue is related to out-of-bounds write vulnerabilities in the translationVectors parsing functionality, which can be triggered by a specially-crafted malformed file. This ca...