NVIDIA BMC 安全漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could access arbitrary files, which could lead to information leakage...

PEAR Archive_Tar Improper Link Resolution Vulnerability

PEAR ArchiveTar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party...

CodeIgniter CMS 4.2.0 SQL Injection

+++++++++++++++++++++++++++++++++ + +Exploit Title : CodeIgniter CMS Version 4.2.0 Sql Injection Vulnerability + +Exploit Author : E1.Coders + +Vendor Homepage : https://www.codeigniter.com/ + +Google Dork ONE : searchResult/?title= + +Google Dork Two : Job/searchResult/?title= + +Date : 15 / 05 ...

Gradio 安全漏洞

gradio is an open source framework. gradio is vulnerable to arbitrary code injection. The vulnerability automatically runs these commands and can be exploited by an attacker to run arbitrary commands on a user's computer...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a resource management error vulnerability, no detailed vulnerability details are provided at this time...

ZEROF Web Server跨站脚本漏洞

ZEROF Web Server is an open source Web framework that simplifies modern Web development . It allows you to build applications without having to worry about package management or routing. ZEROF Web Server has a security vulnerability , there is no information about the vulnerability , please keep...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC in version v1.1.0 there is a denial of service vulnerability , the vulnerability stems from the function gffree in utils/alloc.c through the existence of an invalid release , an attacker can exploit the vulnerability to perform a denial of service...

gpac 代码问题漏洞

GPAC is an open source multimedia framework. gfsgvrmlmfappend function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. gfsgvrmlmfalloc function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. a code issue vulnerability exists in GPAC, which stems from an error in the processing logic of the product's gfgetbitsize function. An attacker could cause a denial of service through this vulnerability...

Design/Logic Flaw

Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5.0 there is a vulnerability that affects anyone who creates and publicly shares Gradio interfaces. File paths are not restricted and users who receive a Gradio link can access an...

CVE-2021-32697 Form validation can be skipped

neos/forms is an open source framework to build web forms. By crafting a special GET request containing a valid form state, a form can be submitted without invoking any validators. Form state is secured with an HMAC that is still verified. That means that this issue can only be exploited if Form...

Important: Red Hat Security Advisory: gupnp security update

An update for gupnp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

ZEROF Web Server SQL注入漏洞

ZEROF Web Server is an open source Web framework that simplifies modern Web development . It allows you to build applications without having to worry about package management or routing. A SQL injection vulnerability exists in ZEROF Web Server version 1.0, which originated when the program allowe...

Bitweaver cross-site scripting vulnerability (CNVD-2021-22577)

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/admin/useractivity.php URI...

CVE-2021-21329 Multi Factor Authentication Token Improperly Validated On User Login

RATCF is an open-source framework for hosting Cyber-Security Capture the Flag events. In affected versions of RATCF users with multi factor authentication enabled are able to log in without a valid token. This is fixed in commit cebb67b...

RATCF 授权问题漏洞

RATCF is an open source framework for hosting Cyber-Security Capture the Flag events. RATCF suffers from an authorization issue vulnerability that originates from the fact that a user with multi-factor authentication enabled can log in without a valid token...

Fiber Trust Management Issues Vulnerability (CNVD-2021-13655)

Fiber is an open source web framework written in the Go language . A trust management issue vulnerability exists in FiberHome HG6245D, which arises from the lack of an effective trust management mechanism in a network system or product, and can be exploited by an attacker to attack affected...

Shenzhen Yuanmeng Cloud Technology Co., Ltd. WeiPHP has file reading vulnerability

WeiPHP is an open source microsoft public platform development framework. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP has a file reading vulnerability, which can be exploited by attackers to obtain sensitive information...

AutoGadgetFS - USB Testing Made Easy

What’s AutoGadgetFS ? AutoGadgetFS is an open source framework that allows users to assess USB devices and their associated hosts/drivers/software without an in-depth knowledge of the USB protocol. The tool is written in Python3 and utilizes RabbitMQ and WiFi access to enable researchers to condu...