Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux Kernel has a code issue vulnerability that stems from a flaw in the IPv6 module where arg.result is used inconsistently in fib6rulelookup, sometimes holding rt6info and...

SUSE CVE-2023-3022

A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6rulelookup, sometimes holding rt6info and other times fib6info. This was not accounted for in other parts of the code where rt6info was expected unconditionally, potentially leading to a kerne...

Logic flaw vulnerability in n5 of the Nanqiong examination system (CNVD-2023-59091)

Nanqiong Exam System n5 is a handheld learning system that realizes online practice, mode exam, exam and result inquiry in one. A logic flaw vulnerability exists in Nanqiong Exam System n5, which can be exploited by an attacker to log into the system and obtain sensitive information...

Exploit for Incorrect Default Permissions in Powerjob

CVE-2023-29923 1. Prepare a url.txt file,...

CVE-2023-2826

A vulnerability has been found in SourceCodester Class Scheduling System 1.0 and classified as problematic. This vulnerability affects unknown code of the file searchteacherresult.php of the component POST Parameter Handler. The manipulation of the argument teacher leads to cross site scripting...

SourceCodester Class Scheduling System 跨站脚本漏洞

Class Scheduling System is a class scheduling system by jkev individual developer. A cross-site scripting vulnerability exists in SourceCodester Class Scheduling System version 1.0, which is caused by unknown code in the file searchteacherresult.php in the component POST Parameter Handler, leadin...

TestComplete support Plugin vulnerable to stored Cross-site Scripting

TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name in its test result page. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. As of publication of this advisory, there is no fix...

GHSA-7P6G-GR9G-VFX6 Jenkins LoadComplete support Plugin Cross-site Scripting vulnerability

Jenkins LoadComplete support Plugin 1.0 and earlier does not escape the LoadComplete test name in its test result page. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. As of publication of this advisory, there is no fix...

GHSA-5WPG-QCMJ-48WH TestComplete support Plugin vulnerable to stored Cross-site Scripting

TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name in its test result page. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. As of publication of this advisory, there is no fix...

Judging Management System SQL注入漏洞

Judging Management System is a review management system by Carlo Montero Personal Developer. A security vulnerability exists in Judging Management System v1.0, which was discovered to contain an SQL injection vulnerability via /php-jms/reviewseresult.php?maineventid=...

CVE-2023-30203

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the eventid parameter at /php-jms/resultsheet.php...

CVE-2023-30077

Judging Management System v1.0 by oretnom23 was discovered to vulnerable to SQL injection via /php-jms/reviewresult.php?maineventid=, maineventid...

PT-2023-22584 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the event id parameter at the "/php-jms/result sheet.php" API endpoint. Recommendations: For...

PT-2023-22526 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: The Judging Management System is vulnerable to SQL injection via the "/php-jms/review result.php" endpoint, specifically through the mainevent id parameter. This allows for potential...

Mozilla: Incorrect optimization result on ARM64

The Mozilla Foundation Security Advisory describes this flaw as: A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result...

Mageia: Security Advisory (MGASA-2023-0147)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the script of the web application for managing IP addresses, app/admin/custom-fields/edit-result.php, allows a violator to execute arbitrary SQL commands.

The vulnerability in the script app/admin/custom-fields/edit-result.php of the IP address management web application, developed with PHPIPAM, relates to the lack of measures taken to protect the SQL query structure during the processing of user fields with the parameter fieldType=set&fieldSize='1...

Spring Data JPA introduces query parser!

The Problem One of Spring Data JPA’s handy features is letting you plugin in custom JPA queries through its @Query annotation. This allows some flexiblity because you are still able to offer sort parameters to the consumers of your app. Check out the example below: interface SampleRepository...

Registering non-emoji domains doesn't work

Lines of code Vulnerability details Impact When registering a name containing a non-emoji tile, all the tiles are mapped to emoji tiles before registering a name, so the registered name is invalid. This ruins the protocol, the users can't use it to register the desired names unless they are purel...

CVE-2023-24532

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars a scalar larger than the order of the curve. This does not impact usages of crypto/ecdsa or crypto/ecdh...