Exploit for OS Command Injection in Proscend M330-W_Firmware

CVE-2022-36779 exploit code for Unauthenticated OS...

CVE-2023-24373

The CVE-2023-24373 entry concerns the WordPress Booking calendar, Appointment Booking System plugin. Affected versions are ≤ 3.2.3, and the root cause is an External Control of Assumed-Immutable Web Parameter that allows bypass by manipulating hidden fields. The vulnerability is categorized as a ...

CVE-2024-31682

CVE-2024-31682 concerns Phone Cleaner: Boost & Clean, version 2.2.0, where an incorrect access control in the fingerprint authentication mechanism allows bypass due to a deprecated API. The CVSSv3.1 base score is 9.8 (CRITICAL), with network attack vector, no privileges required, and user interac...

CVE-2021-3899

CVE-2021-3899 involves a race condition in Apport's replaced-executable detection that, with specific local configuration, could allow a local attacker to run arbitrary code as root. This vulnerability is referenced in multiple advisories (Ubuntu USN-6894-1, RH Red Hat CVE notes, and Nessus/OSV e...

CVE-2024-36889

In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure sndnxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snduna: WARNING: CPU: 1 PID: 38 at net/mptcp/protocol.c:1005 mptcpcleanuna+0x4b3/0x620 net/mptcp/protocol.c:1005 Modules...

CVE-2024-23360

CVE-2024-23360 involves a memory corruption issue in LPAC-related components when creating an LPAC client, where the LPAC engine is allowed to access GPU registers. Affected scope is described across multiple sources (NVD, Red Hat, CVE lists) as memory corruption with HIGH impact on confidentiali...

CVE-2023-43556

CVE-2023-43556 describes memory corruption in the Hypervisor when platform information is not aligned. The available connected documents corroborate this vulnerability across multiple sources (NVD, Red Hat CVE entry, CVE list, Vuln Enrichment) with the same description. The materials do not speci...

Advisory ROSA-SA-2024-2430

Software: libvirt 6.0.0 OS: ROSA Virtualization 2.1 packageevrstring: libvirt-6.0.0-28.module+el8.3.0+7827+5e65edd7.src.rpm CVE-ID: CVE-2021-3631 BDU-ID: 2024-02428 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Libvirt virtualization management library is related to the creation of SELinux M...

RHEL 5 : firefox (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Mozilla: Malicious Extension could obtain auth codes from OAuth login flows CVE-2020-6823 - Mozilla Firef...

[SECURITY] Fedora 39 Update: rust-docopt-1.1.1-13.fc39

Command line argument parsing...

CVE-2024-2506

The Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the plugin’s Custom JS functionality in all versions up to 4.2.7, due to insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires at least Contributor-level ...

CVE-2024-35357

Diño Physics School Assistant version 2.3 contains a SQL injection vulnerability in the delete_item path. The issue arises from unvalidated input passed through /classes/Master.php?f=delete_item with the id parameter, enabling SQL injection (public details confirm CVE-2024-35357 with a base score...

CVE-2024-36933 nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().

In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb-protocol,data,macheader for outer header in nshgsosegment. syzbot triggered various splats see 0 and links by a crafted GSO packet of VIRTIONETHDRGSOUDP layering the following protocols: ETHP8021AD + ETHPNSH +...

CVE-2024-36112

CVE-2024-36112 affects Nautobot: in 1.3.0–1.6.22 and 2.0.0–2.2.4, listing members of Dynamic Groups via the UI or API does not enforce member-object permissions, enabling a user with extras.view_dynamicgroup to see all Group members regardless of dcim.view_device. Fixed in Nautobot 1.6.23 and 2.2...

CVE-2024-5433

The CVE-2024-5433 vulnerability affects Campbell Scientific CSI Web Server (and RTMC Pro) and is caused by a path traversal flaw in a command that returns the most recent file matching a given expression. Versions 1.6 and earlier of the CSI Web Server (and RTMC Pro 5.x/4.x) are affected. An attac...

CVE-2024-33801

Affects: Campcodes Complete Web-Based School Management System v1.0. Vulnerable component: /model/get_subject_routing.php. Root cause: SQL injection via the id parameter that allows arbitrary SQL execution. Impact (per sources): high confidentiality, integrity, and availability implications; over...

CVE-2024-35324

CVE-2024-35324 affects Douchat 4.0.5 and is described as an arbitrary file upload vulnerability via the endpoint Public/Plugins/webuploader/server/preview.php. The CVSSv3.1 base score is 9.8 (CRITICAL) with network attack vector, no privileges required, no user interaction, and impacts to confide...

CVE-2024-24684

libigl v2.5.0 readOFF contains multiple stack-based buffer overflows in header parsing. A 1000-byte fixed-size header buffer and a unsafe fscanf on the header and on comment lines can overflow when processing specially crafted .off files, enabling potential memory corruption. Connected reports (T...

CVE-2024-5410

CVE-2024-5410 affects ORing IAP-420 web-interface (version 2.01e and earlier). The stored XSS vulnerability can be triggered by injecting JavaScript into the SSID input field, and the filename parameter in a configuration file upload is prone to command injection, potentially giving an attacker c...

libigl readOFF stack-based buffer overflow vulnerabilities

Talos Vulnerability Report TALOS-2023-1784 libigl readOFF stack-based buffer overflow vulnerabilities May 28, 2024 CVE Number CVE-2023-35950,CVE-2023-35953,CVE-2023-35952,CVE-2023-35951,CVE-2023-35949 SUMMARY Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp...