itsourcecode Laravel Property Management System 代码问题漏洞

Laravel Property Management System is itsourcecode open source property management system. A code issue exists in version 1.0 of itsourcecode Laravel Property Management System due to an unlimited upload vulnerability in the file parameter of the PropertiesController.php page...

itsourcecode Laravel Property Management System 跨站脚本漏洞

Laravel Property Management System is an itsourcecode open source property management system. A cross-site scripting vulnerability exists in version 1.0 of itsourcecode Laravel Property Management System, which originates from a cross-site scripting vulnerability in the Note text parameter of the...

Security Bulletin: Vulnerability in CRI-O affects watsonx.data

Summary CRI-O could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by an arbitrary systemd property injection. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-3154 DESCRIPTION: CRI-O could allow a remote authenticated attacker to...

CVE-2024-34618

Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information...

CVE-2024-34618

Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information...

CVE-2024-34618

Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information...

CVE-2024-34618

The CVE-2024-34618 issue is described as an improper access control in a System property prior to Samsung SMR Aug-2024 Release 1, enabling local attackers to access cell-related information on Samsung Mobile devices. Connected sources (e.g., Red Hat and NVD entries) confirm the vulnerability orig...

CVE-2024-34618

Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Aug-2024 Release 1 prior to version 1, which stems from an improper access control issue...

pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE

A flaw was found in the PostgreSQL JDBC Driver. A SQL injection is possible when using the non-default connection property preferQueryMode=simple in combination with application code that has a vulnerable SQL that negates a parameter value...

PT-2024-28301 · Lukebond · Json-Override

Name of the Vulnerable Software and Affected Versions: lukebond json-override version 0.2.0 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via the proto property. This can be exploited to achieve malicious goals. Recommendations: For lukebond...

snapstate 安全漏洞

snapstate is a library by the individual developer Chase Moskal. A security vulnerability exists in snapstate version v0.0.9, which stems from the discovery of a contained prototype contamination via the attemptNestedProperty function. An attacker could exploit the vulnerability to execute...

Arbitrary File Read Vulnerability in Tianwen Property ERP System of Chengdu Tianwen Interconnection Technology Co. Ltd (CNVD-2024-36506)

Based on software development and technical services, Chengdu Tianwen Interlink Technology Co., Ltd. establishes property ERP application system and provides property management companies with intelligent property management solutions aiming at cost reduction, quality assurance and efficiency...

OESA-2024-1897 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: PCI: ofproperty: Return error for intmap allocation failure Return -ENOMEM from ofpcipropintrmap if kcalloc fails to prevent a NULL pointer dereference in this...

VulnCheck KEV: CVE-2023-21932

Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications component: OXI. The supported version that is affected is 5.6. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

VDA "Unregistered" due to special characters in 'BrowserName' property of published application

VDA might turn to "Unregistered" state when 'BrowserName' property of published application contains special characters, e.g. a pair of brackets...

Vue 安全漏洞

Vue is an HTML, CSS, and JS framework open-sourced by Vue. It is used to develop web applications with fine-grained reactivity. Vue suffers from a security vulnerability that stems from vulnerability to cross-site scripting attacks, where an attacker can change the prototype chain of certain...

Default values of properties when creating a single-session OS static delivery group

When creating a single-session OS static delivery group, please be aware of the default values for its properties: AutomaticPowerOnForAssigned: True AutomaticPowerOnForAssignedDuringPeak: False These properties affect the behavior of assigned machines in the delivery group. Please refer to the...

SUSE CVE-2022-48843

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Navigating Insider Risks: Are your Employees Enabling External Threats?

Attacks on your network are often meticulously planned operations launched by sophisticated threats. Sometimes your technical fortifications provide a formidable challenge, and the attack requires assistance from the inside to succeed. For example, in 2022, the FBI issued a warning1 that SIM swap...