CVE-2022-4857

CVE-2022-4857 affects Modbus Tools Modbus Poll (mbpoll.exe) in the mbp File Handler, with versions up to 9.10.0. The vulnerability is a buffer overflow in an unknown function of mbpoll.exe, which could be exploited remotely and was disclosed publicly. Connected documents consistently state the is...

Modbus Tools Modbus Poll 安全漏洞

Modbus Tools Modbus Poll is a Modbus master simulator from Modbus Tools. It is mainly used to help developers of Modbus slave devices or others who want to test and simulate Modbus. A security vulnerability exists in Modbus Tools Modbus Poll version 9.10.0 and earlier, which stems from a problem...

PT-2022-28142 · Unknown · Modbus Poll

Name of the Vulnerable Software and Affected Versions: Modbus Tools Modbus Poll versions up to 9.10.0 Description: A critical issue was found in the mbpoll.exe file of the mbp File Handler component, leading to a buffer overflow. This can be exploited remotely. The issue affects some unknown...

Design/Logic Flaw

BigBlueButton is an open source web conferencing system. Versions prior to 2.4.0 expose sensitive information to Unauthorized Actors. This issue affects meetings with polls, where the attacker is a meeting participant. Subscribing to the current-poll collection does not update the client UI, but...

CVE-2022-23490 Improper access control to polling votes

BigBlueButton is an open source web conferencing system. Versions prior to 2.4.0 expose sensitive information to Unauthorized Actors. This issue affects meetings with polls, where the attacker is a meeting participant. Subscribing to the current-poll collection does not update the client UI, but...

Code injection

BigBlueButton is an open source web conferencing system. This vulnerability only affects release candidates of BigBlueButton 2.4. The attacker can start a subscription for poll results before starting an anonymous poll, and use this subscription to see individual responses in the anonymous poll...

CVE-2022-41964 BigBlueButton contains Response leaks in anonymous polls

BigBlueButton is an open source web conferencing system. This vulnerability only affects release candidates of BigBlueButton 2.4. The attacker can start a subscription for poll results before starting an anonymous poll, and use this subscription to see individual responses in the anonymous poll...

BigBlueButton 信息泄露漏洞

BigBlueButton is an open source web conferencing system from the BigBlueButton community. An information disclosure vulnerability exists in versions of BigBlueButton prior to 2.4.0, which can be exploited by an attacker to start a subscription to the results of an anonymous poll before it is...

The vulnerability of the “Create poll” module in the YOP Poll plugin of the WordPress content management system allows a hacker to perform cross-site scripting attacks.

The vulnerability of the “Create poll” module in the YOP Poll plugin of the WordPress content management system is related to the lack of protection for website structure when processing parameters such as “Vote Button Label”, “Show Results Link”, and “Display Back to vote Link”. Exploiting this...

PT-2024-11850 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition on the per-CQ variable napi work done in the Linux kernel's net component. After calling napi complete done, another CPU can start the napi...

TikTok: Any user can vote on `Friend Only` video pull

Vulnerability description not provided...

PT-2022-6197 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A use-after-free flaw was found in the io uring subcomponent of the Linux Kernel due to a race condition in the poll refs function. This issue may cause a NULL pointer dereference,...

kernel: block: null_blk: end timed out poll request

In the Linux kernel, the following vulnerability has been resolved: block: nullblk: end timed out poll request When poll request is timed out, it is removed from the poll list, but not completed, so the request is leaked, and never get chance to complete. Fix the issue by ending it in timeout...

Libtirpc: Denial of Service

Background Libtirpc is a port of Sun's Transport-Independent RPC library to Linux. Description Currently svcrun does not handle poll timeout and rendezvousrequest does not handle EMFILE error returned from accept2 as it used to. These two missing functionality were removed by commit b2c9430f46c4...

Gas, a positive social network for teens (no, really)

A new social network is currently in the news, billed as a positive space for teens to enjoy themselves. Im all for positive spaces online, but what is it, and will teens really be happier there than say Instagram, or even just hanging out in WhatsApp groups? Pump the gas Launched in August of th...

Denial Of Service (DoS)

linux-kvm is vulnerable to denial of service. The vulnerability exists because the iouring poll does not properly handle POLLFREE, allowing an attacker to crash the application through the use after free...

Automattic: Archived / Deleted / Private Poll Can Be Viewed by Another Users [Crowdsignal WordPress plugins]

This issue was reported by @apapedulimu in CrowdSignal. The private or deleted polls on https://app.crowdsignal.com questions/answers, not results could be viewed by other users through the editor in the CrowdSignal plugin. Happy to learn and work with the Automattic team!...

CVE-2022-3176

A use-after-free flaw was found in iouring in the Linux kernel. This flaw allows a local user to trigger the issue if a signalfd or binder fd is polled with the iouring poll due to a lack of iouring POLLFREE handling...

The vulnerability of the Signalfd_poll() and binder_poll() functions in Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Signalfdpoll and binderpoll functions in Linux operating systems is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

GSD-2022-1005748 net: Fix a data-race around sysctl_net_busy_poll.

net: Fix a data-race around sysctlnetbusypoll. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...