594 matches found
CVE-2023-4206
There are 3 CVEs for the use-after-free flaw found in net/sched/clsfw.c in classifiers clsfw, clsu32, and clsroute in the Linux Kernel: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. A local user could use any of these flaws to crash the system or potentially escalate their privileges on the system...
Prevent files / folders access < 2.5.2 - Admin+ Arbitrary File Upload
Description The plugin does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server. PoC 1 Create a PHP file cmd.php with the contents 2 Go to https://example.com/wp-admin/admin.php?page=momediarestrict=privatedirectory 3 Then upload a fi...
These 6 Questions Will Help You Choose the Best Attack Surface Management Platform
The hype around different security categories can make it difficult to discern features and capabilities from bias when researching new platforms. You want to advance your security measures, but what steps actually make sense for your business? For anyone ready to find an attack surface managemen...
Arbitrary command execution on Windows
Description Opening files from an untrusted directory can lead to execution of arbitrary commands on Windows systems, this is possible by having a malicious file with the same name as a trusted executable, Windows gives priority to the current directory when searching for executables. Several...
Possible to stop trading
Lines of code Vulnerability details Impact It's possible to stop market due to division by 0 exception. So better to prevent this, because better to revert with missing minAmountOut than revert with some error, which might be complicated to detect. Proof of Concept There is a change to withdraw a...
The vulnerability of the EMUI operating system of HarmonyOS, related to bypassing authentication through spoofing, allows attackers to hide application icons on the desktop in order to prevent their deletion.
The vulnerability of the EMUI operating system of HarmonyOS relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to conceal application icons on the desktop, thereby preventing their deletion...
valsir.it Cross Site Scripting vulnerability OBB-3391330
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-3367 · Huawei · Huawei Desktop
Name of the Vulnerable Software and Affected Versions: Huawei desktop affected versions not specified Description: The issue is related to spoofing trustlists, which can be exploited to hide app icons on the desktop, preventing them from being uninstalled. This is achieved by bypassing...
bind security and bug fix update
32:9.16.23-11 - Correct backport issue in statistics rendering fix 2126912 32:9.16.23-10 - Handle subtle difference between upstream and rhel CVE-2022-3094 32:9.16.23-9 - Prevent flooding with UPDATE requests CVE-2022-3094 - Handle RRSIG queries when server-stale is active CVE-2022-3736 - Fix cra...
formigal-panticosa.com Cross Site Scripting vulnerability OBB-3329859
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Domain-Protect - OWASP Domain Protect - Prevent Subdomain Takeover
OWASP Global AppSec Dublin - talk and demo Features scan Amazon Route53 across an AWS Organization for domain records vulnerable to takeover scan Cloudflare for vulnerable DNS records take over vulnerable subdomains yourself before attackers and bug bounty researchers automatically create known...
CVE-2023-1402
The course participation report required additional checks to prevent roles being displayed which the user did not have access to view...
Cross site scripting
In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk...
SUSE CVE-2022-40153
DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...
SUSE CVE-2022-40156
DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...
SUSE CVE-2022-40155
DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...
GSD-2023-1001962 io_uring/poll: don't reissue in case of poll race on multishot request
iouring/poll: don't reissue in case of poll race on multishot request This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...
GSD-2023-1001959 dmaengine: idxd: Prevent use after free on completion memory
dmaengine: idxd: Prevent use after free on completion memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...
GSD-2023-1001886 ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()
ASoC: SOF: ipc4-mtrace: prevent underflow in sofipc4prioritymaskdfswrite This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...
