Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04328)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04320)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04329)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

CVE-2022-4636

Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker to steal user credentials and other sensitive information through local file inclusion...

Path traversal

Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker to steal user credentials and other sensitive information through local file inclusion...

Exploit for Server-Side Request Forgery in Lexmark B2236_Firmware

Lexmark printer stuff This repository contains all the work r...

New Study Uncovers Text-to-SQL Model Vulnerabilities Allowing Data Theft and DoS Attacks

A group of academics has demonstrated novel attacks that leverage Text-to-SQL models to produce malicious code that could enable adversaries to glean sensitive information and stage denial-of-service DoS attacks. "To better interact with users, a wide range of database applications employ AI...

New Study Uncovers Text-to-SQL Model Vulnerabilities Allowing Data Theft and DoS Attacks

A group of academics has demonstrated novel attacks that leverage Text-to-SQL models to produce malicious code that could enable adversaries to glean sensitive information and stage denial-of-service DoS attacks. "To better interact with users, a wide range of database applications employ AI...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm, an American company. A security vulnerability exists in Qualcomm Chipsets that originates from a buffer overflow in Core, resulting in information disclosure. The following products are affected: AQT1000, AR8031, AR8035, CSR8811, CSRA6620,...

Qualcomm Chipsets 代码问题漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which is caused by a null pointer dereference. The following products are affected: APQ8017, APQ8096AU, AR8031, CSRA6620, CSRA6640, CSRB31024, MDM9150, MDM9206, MDM9250...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets suffer from a buffer error vulnerability that stems from improper input to the user, resulting in memory corruption in the Automotive Android operating system. The following products are affected:...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm, an American company. A security vulnerability exists in Qualcomm Chipsets that originates from a buffer overflow in Core, resulting in information disclosure. The following products are affected: AQT1000, AR8031, AR8035, CSRA6620, CSRA6640...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the presence of a stack-based buffer overflow that results in Core memory corruption. The following products are affected: AQT1000, AR8031, AR8035,...

MediaTek 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek that originates from an out-of-bounds write in mdp due to incorrect error handling, which may result in a local privilege escalation that requires system execution...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in MediaTek that stems from a lack of boundary checking in gps, where out-of-bounds writes may occur, which may result in local privilege escalation, affecting the following products an...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. MediaTek suffers from a buffer error vulnerability that originates in watchdog, due to lack of boundary checking, out-of-bounds reads may occur, which can be exploited by an attacker to obtain sensitive information,...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. MediaTek suffers from a buffer error vulnerability that originates from an out-of-bounds write in the hevc decoder due to a lack of bounds checking, which could result in a local privilege escalation affecting the following...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in MediaTek that originates from a possible out-of-bounds write in keyinstall due to an integer overflow, which could result in a local privilege escalation affecting the following...

Sql injection

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch...

CVE-2014-125037 License to Kill injury.rb sql injection

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch...