Apache Commons Text: Arbitrary Code Execution

Background Apache Commons Text is a library focused on algorithms working on strings. Description Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to...

[SECURITY] [DSA 5313-1] hsqldb security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5313-1 [email protected] https://www.debian.org/security/ Markus Koschany January 11, 2023 https://www.debian.org/security/faq -...

xorg-x11-server: XIChangeProperty out-of-bounds access

A vulnerability was found in X.Org. The issue occurs because the handler for the XIChangeProperty request has a length-validation issue, resulting in out-of-bounds memory reads and potential information disclosure. This flaw can lead to local privilege elevation on systems where the X server runs...

OESA-2023-1009 ImageMagick security update

Security Fixes: In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to...

brittany-property-direct.com Cross Site Scripting vulnerability OBB-3129415

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OESA-2022-2163 xorg-x11-server security update

Xephyr is an X server which has been implemented as an ordinary X application. It runs in a window just like other X applications,but it is an X server itself in which you can run other software. It is a very useful tool for developers who wish to test their applications without running them on...

Prototype Pollution

Overview utilities is an A classic collection of JavaScript utilities Affected versions of this package are vulnerable to Prototype Pollution via the mix function. PoC javascript var utilities = require"utilities" badobjects= test:"123" console.log"Before:"+.test...

Huawei EulerOS: Security Advisory for pcre2 (EulerOS-SA-2022-2868)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.10.0 : pcre2 (EulerOS-SA-2022-2868)

According to the versions of the pcre2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the...

EulerOS Virtualization 2.10.1 : pcre2 (EulerOS-SA-2022-2886)

According to the versions of the pcre2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the...

Hallmark Channel: Securing the Season

How Crown Media protects its crown jewel It’s that time of year again…chestnuts roasting on an open-fire, kids making wish-lists, and company holiday parties where you can showcase your most outlandish ugly sweater. It’s also the time of year we all get a little bit less cynical and take in a...

Sharing Netflix, Disney+, other passwords is illegal, according to new guidance

The Intellectual Property Office IPO, the UK government body overseeing intellectual property rights in the UK, has quietly released new guidance on piracy and online counterfeit goods. This campaign is a joint effort between IPO and Meta, Facebooks parent company. The general issue on piracy is...

SUSE-SU-2022:4481-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2022-46340: Server XTestSwapFakeInput stack overflow bsc1205874 - CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access bsc1205877 - CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free bsc1205879 - CVE-2022-4634...

X.Org X Server 缓冲区错误漏洞

X.Org X Server is an X Window System display server from the X.org Foundation. X.Org X Server suffers from a buffer error vulnerability that stems from its XIChangeProperty request handler incorrectly validating the length leading to out-of-bounds memory reads and potential information disclosure...

Hacking Trespass Law

This article talks about public land in the US that is completely surrounded by private land, which in some cases makes it inaccessible to the public. But theres a hack: Some hunters have long believed, however, that the publicly owned parcels on Elk Mountain can be legally reached using a practi...

CVE-2022-46686

Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to set or change these...

PT-2022-26540 · Unknown · House Rental System

Name of the Vulnerable Software and Affected Versions: House Rental System affected versions not specified Description: A critical vulnerability has been found in the House Rental System, affecting an unknown functionality of the file search-property.php of the component POST Request Handler. The...

House Rental System SQL注入漏洞

House Rental System is a house rental management system that allows you to add, modify and delete listings and place reservations. House Rental System suffers from a SQL injection vulnerability that originates from an unknown function in the file /view-property.php, where the operation of the...

PT-2022-26529 · Unknown · House Rental System

Name of the Vulnerable Software and Affected Versions: House Rental System affected versions not specified Description: A critical issue was found in the House Rental System, affecting an unknown function of the file /view-property.php. The manipulation of the property id argument leads to sql...

House Rental System SQL注入漏洞

House Rental System is a rental management system that allows you to add, modify, and delete listings and place reservations. House Rental System suffers from a SQL injection vulnerability that arises from unknown functionality in the search-property.php file of the component's POST request...