37 matches found
Lobster_pro 4.12.12-LTS Token Replay / Privilege Escalation
Lobsterpro version 4.12.12-LTS and potentially other versions prior to 25.1.3 suffer from a privilege escalation vulnerability due to allowing use of non-privileged access to achieve administrative access. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Privilege escalation via request replaying ...
CVE-2026-3322
The software Lobster_pro is vulnerable to a privilege escalation issue due to improper permission checks . Attackers can interact with endpoints that should strictly require administrative privileges, potentially leading to high confidentiality impact. This vulnerability affects Lobster_pro versi...
CVE-2026-3322 Privilege escalation via request replaying in Lobster_pro
Due to improper permission checks in Lobsterpro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobsterpro version 4.12.12-LTS and potentially other versions prior to 25.1.3...
CVE-2026-3322 Privilege escalation via request replaying in Lobster_pro
Due to improper permission checks in Lobsterpro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobsterpro version 4.12.12-LTS and potentially other versions prior to 25.1.3...
CVE-2026-19127
CVE-2026-19127 affects the billing and license activation subsystem of the Postiz app. The issue arises from insufficient cryptographic validation or lack of server-side state verification for promotional/lifetime-deal (LTD) redemption codes, enabling an unauthenticated attacker to forge valid re...
CVE-2026-67973: Uncontrolled Resource Consumption
An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via replaying final CFDP PDUs...
CVE-2026-67973
An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via replaying final CFDP PDUs...
CVE-2026-45322
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injection vulnerability in the shell action replay path. In affected releases, ShellReceiver.runshell passes a command string...
PT-2026-38399
Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description Resource exhaustion occurs because the MQTT 5 header Properties section is parsed and buffered before any message size limit is applied. In the MqttDecoder class, the decodeVariableHeader...
tcprewrite Heap Buffer Overflow DoS
The vulnerability of the getl2lenprotocol function in the tcprewrite tool for editing and replaying PCAP files involves the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2001-1482
Malware in sbrugna...
CVE-2022-47930
An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Additional check in niclear The check for NTFSFLAGSLOGREPLAYING has been added to prevent access to the uninitialized bitmap during the replay process...
ext4: fix infinite loop when replaying fast_commit
...
UBUNTU-CVE-2021-47371
In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix memory leaks in nexthop notification chain listeners syzkaller discovered memory leaks 1 that can be reduced to the following commands: ip nexthop add id 1 blackhole devlink dev reload pci/0000:06:00.0 As part of the...
DEBIAN-CVE-2023-46841
Recent x86 CPUs offer functionality named Control-flow Enforcement Technology CET. A sub-feature of this are Shadow Stacks CET-SS. CET-SS is a hardware feature designed to protect against Return Oriented Programming attacks. When enabled, traditional stacks holding both data and return addresses...
M-03 Unmitigated
Lines of code Vulnerability details Impact The mitigation updates the following AmbireAccount.execute function by adding nonce++ in the scheduled != 0 && !isCancellation if block within the sigMode == SIGMODERECOVER || sigMode == SIGMODECANCEL if block. However, this does not fix M-03: Recovery...
PT-2023-19631
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid...
