Google Android 安全漏洞

Google Android is a free and open source mobile operating system based on the Linux kernel developed by Google. Google Android suffers from a logic error vulnerability that stems from a code logic error that can be exploited by an attacker to cause a local elevation of privilege...

NVIDIA TAO Resource Loading Vulnerability

NVIDIA TAO is NVIDIA's tool suite for machine learning model development and deployment. NVIDIA TAO suffers from a resource loading vulnerability that can be exploited by attackers to cause elevation of privilege, data tampering, denial of service, and information disclosure hazards...

Synology DiskStation Manager和Synology Unified Controller 安全漏洞

Synology DiskStation Manager DSM and Synology Unified Controller are both products of Synology, a Chinese company.Synology DiskStation Manager is an operating system for use on networked storage servers NAS. Synology DiskStation Manager is an operating system used on network storage servers NAS t...

X-SpringBoot 安全漏洞

X-SpringBoot is a lightweight Java rapid development platform for czx individual developers. A security vulnerability exists in X-SpringBoot version 6.0, which stems from the unsynchronized front-end and back-end privilege components and could lead to an elevation of privilege attack...

Grav Code Execution Vulnerability

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a code execution vulnerability that stems from malicious Twig expression injection, which can be exploited by an attacker to cause...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a lack of boundary checking, which could lead to out-of-bounds writes and local elevation of privilege...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from improper input validation, which could result in memory corruption and local elevation of privilege...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a lack of boundary checking, which could lead to out-of-bounds writes and local elevation of privilege...

JumpCloud Remote Assist 安全漏洞

JumpCloud Remote Assist is a remote access module from JumpCloud USA. A security vulnerability exists in JumpCloud Remote Assist versions prior to 0.317.0 that stems from the uninstaller performing privileged operations without verifying directory trust, which could result in arbitrary file write...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a lack of boundary checking, which could lead to out-of-bounds writes and local elevation of privilege...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from an integer overflow that could lead to out-of-bounds writes and local elevation of privilege...

Blood Bank Management System 安全漏洞

Blood Bank Management System is a blood bank management system by shridhar shukla individual developer. A security vulnerability exists in Blood Bank Management System version 1.0, which stems from an elevation of privilege issue in delete.php...

PubNet 安全漏洞

PubNet is a self-hosted package repository for the individual developer Ricardo Boss. A security vulnerability exists in PubNet versions prior to 1.1.3, which stems from an unauthenticated /api/storage/upload endpoint that could lead to identity spoofing and elevation of privilege...

WordPress EduKart Pro plugin elevation of privilege vulnerability

WordPress EduKart Pro plugin is an e-commerce plugin for the WordPress platform that is primarily used to build and manage online stores. WordPress EduKart Pro plugin has an elevation of privilege vulnerability that stems from the edukartproregisteruserfrontend function not restricting user...

OneUptime 访问控制错误漏洞

OneUptime is a comprehensive solution from OneUptime Open Source. for monitoring and managing your online services. An Access Control Error vulnerability exists in versions prior to OneUptime 8.0.5567 that stems from login response manipulation and could lead to elevation of privilege...

Ruoyi 安全漏洞

Ruoyi is a backend management system for Ruoyi Individual Developers. A security vulnerability exists in Ruoyi version 4.8.1, which stems from a departmental privilege being higher than an active user's privilege, which may result in elevated privileges...

MegaTec UPSilon2000 安全漏洞

MegaTec UPSilon2000 is an uninterruptible power supply UPS monitoring and control software from Taiwan, China-based MegaTec. A security vulnerability exists in MegaTec UPSilon2000 that stems from an unquoted service path that could lead to elevation of privilege...

NVIDIA DGX Spark 缓冲区错误漏洞

The NVIDIA DGX Spark is a personal AI computer from NVIDIA. A buffer error vulnerability exists in NVIDIA DGX Spark GB10, which stems from an out-of-bounds write in the SROOT firmware that could lead to code execution, data tampering, denial of service, or elevation of privilege...

Primakon Pi Portal 安全漏洞

Primakon Pi Portal is a project, contract management platform from Primakon Croatia. A security vulnerability exists in Primakon Pi Portal version 1.0.18, which stems from insufficient authorization checking of API endpoints and could lead to unauthorized data manipulation and elevation of...

WordPress plugin EduKart Pro 安全漏洞

WordPress EduKart Pro plugin is an e-commerce plugin for the WordPress platform that is primarily used to build and manage online stores. WordPress EduKart Pro plugin has an elevation of privilege vulnerability that stems from the edukartproregisteruserfrontend function not restricting user...