CVE-2022-42984

WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients...

CVE-2022-40405

WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs...

PT-2022-26694

Name of the Vulnerable Software and Affected Versions WoWonder Social Network Platform version 4.1.4 Description The issue is related to a SQL injection vulnerability. It can be exploited via the offset parameter at the "requests.php?f=search&s=recipients" endpoint. Recommendations For WoWonder...

CVE-2022-42984: Improper Neutralization of Special Elements used in an SQL Command

WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients...

CVE-2022-40405: Improper Neutralization of Special Elements used in an SQL Command

WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs...

PT-2022-25369

Name of the Vulnerable Software and Affected Versions WoWonder Social Network Platform version 4.1.2 Description The issue is related to a SQL injection vulnerability. It can be exploited via the offset parameter at the "requests.php?f=load-my-blogs" endpoint. Recommendations For WoWonder Social...

WoWonder Social Network Platform SQL注入漏洞

WoWonder Social Network Platform is a PHP social networking script by WoWonder. It is used to create your own social networking website. A security vulnerability exists in WoWonder Social Network Platform version v4.1.2, which stems from an attacker being able to implement SQL injection via the...

WoWonder Social Network Platform SQL注入漏洞

WoWonder Social Network Platform is a PHP social networking script by WoWonder. It is used to create your own social networking website. A security vulnerability exists in WoWonder Social Network Platform version 4.1.4, which stems from an attacker being able to implement SQL injection via the...

TensorFlow IncrementOffset DoS

The vulnerability of the IncrementOffset function in the TensorFlow machine learning system is related to the violation of the buffer’s initial boundary when processing the sizeofchunk value. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Potential DoS in unbounded for loop

Lines of code Vulnerability details Proof of Concept The function facets in Getters.sol iterates over the DiamondStorage facets array. In Diamond.sol we can see that by calling diamondCut in a way that saveFacetIfNew gets called, the diamond owner can add an indefinite amount of entries. If this ...

kernel: KVM: cmpxchg_gpte can write to pfns outside the userspace region

A flaw was found in KVM. When updating a guest's page table entry, vmpgoff was improperly used as the offset to get the page's pfn. As vaddr and vmpgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and...

CVE-2022-33193

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This...

Command injection

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This...

USN-5695-1 linux-gcp vulnerabilities

It was discovered that the SUNRPC RDMA protocol implementation in the Linux kernel did not properly calculate the header size of a RPC message payload. A local attacker could use this to expose sensitive information kernel memory. CVE-2022-0812 Moshe Kol, Amit Klein and Yossi Gilad discovered tha...

CLSA-2022-1666283812 Fixed CVE-2022-1012 in kernel

secureseq: use the 64 bits of the siphash for port offset calculation CVE-2022-1012...

CLSA-2022-1666277963 Fixed CVE-2022-1012 in kernel

secureseq: use the 64 bits of the siphash for port offset calculation CVE-2022-1012...

DEBIAN-CVE-2022-43043

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BDCheckSFTimeOffset at /bifs/fielddecode.c...

UBUNTU-CVE-2022-43043

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BDCheckSFTimeOffset at /bifs/fielddecode.c...

Memory corruption

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto...

Qualcomm Automotive Multimedia 缓冲区错误漏洞

Qualcomm Automotive Multimedia is a support firmware for automotive multimedia from Qualcomm. A security vulnerability exists in Qualcomm Automotive Multimedia that originates from an out-of-range pointer offset that results in memory corruption...