EUVD-2017-3112

Malware in sbrugna...

EUVD-2023-32220

Malicious code in bioql PyPI...

CVE-2023-28550

Memory corruption in MPP performance while accessing DSM watermark using external memory address...

Apache Doris Command Execution Vulnerability

Apache Doris is a modern MPP analytic database product of the U.S. Apache Apache Foundation. Can provide sub-second queries and efficient real-time data analysis. Apache Doris has a command execution vulnerability that originates from an unchecked jdbc driver file used by the jdbc directory, whic...

Apache Doris Security Bypass Vulnerability

Apache Doris is a modern MPP analytic database product of the U.S. Apache Apache Foundation. Can provide sub-second queries and efficient real-time data analysis. Apache Doris has a security bypass vulnerability that stems from the use of the chmod function, which can be exploited by an attacker ...

CVE-2023-28550

Memory corruption in MPP performance while accessing DSM watermark using external memory address...

Memory corruption

Memory corruption in MPP performance while accessing DSM watermark using external memory address...

CVE-2023-28550

CVE-2023-28550 affects Qualcomm chipsets, describing memory corruption in MPP performance when accessing the DSM watermark via an external memory address. The vulnerability is tied to improper memory bounds handling within the MPP component, leading to potential high-severity impact (as indicated...

CVE-2023-28550 Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Memory corruption in MPP performance while accessing DSM watermark using external memory address...

Sql injection

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

CVE-2017-11494

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

CVE-2017-11494

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

CVE-2017-11494

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

CVE-2017-11494

SOL.Connect ISET-mpp meter, version 1.2.4.2 and earlier, contains an SQL injection in the login action via the vulnerable user parameter. This results from inadequate input handling and allows remote attackers to execute arbitrary SQL commands, potentially gaining unauthorized access or manipulat...

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection

Vulnerability type: SQL injection, leading to administrative access through authentication bypass. ----------------------------------- Product: SOL.Connect ISET-mpp meter ----------------------------------- Affected version: SOL.Connect ISET-mpp meter 1.2.4.2 and possibly earlier Vulnerable...

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection Vulnerability

Exploit for hardware platform in category web applications Vulnerability type: SQL injection, leading to administrative access through authentication bypass. ----------------------------------- Product: SOL.Connect ISET-mpp meter ----------------------------------- Affected version: SOL.Connect...

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection Vulnerability type: SQL injection, leading to administrative access through authentication bypass. ----------------------------------- Product: SOL.Connect ISET-mpp meter ----------------------------------- Affected version: SOL.Connect ISET-mpp...

Pornhub: Blind Stored XSS against Pornhub employees using Amateur Model Program

The researcher discovered a stored XSS attack vector via the amateur model settings page on Pornhub. I was able to turn Stored Self-XSS in the MPP Model Payment Program application input form field into the Blind Stored XSS without user interaction against employees who process the MPP...

Heap overflow

Heap-based buffer overflow in the cdfreadsat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file. NOTE: some of these details are obtained from third...