3718 matches found
Google Pixel 安全漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...
Contest Gallery < 19.1.5 - Unauthenticated SQL Injection
The plugins do not escape the cgFields POST parameter before concatenating it to an SQL query in users-registry-check-registering-and-login.php. This may allow malicious visitors to leak sensitive information from the site's database. POST /wp-admin/admin-ajax.php HTTP/1.1 Host: localhost:8080...
Telepad 安全漏洞
Telepad is an application from Telepad Inc. It allows you to control your computer's mouse and keyboard by using your smartphone. A security vulnerability exists in versions of Telepad prior to 1.0.7, which stems from a vulnerability that allows an attacker who is in an intermediate position...
Google Pixel 安全漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...
6 Quadrillion Token Heist Hits BNB Chain-Based DeFi Protocol Ankr
By Deeba Ahmed According to crypto intelligence firm Arkham, the attacker's wallet address was linked to a developer at Ankr, meaning an inside job can't be ruled out. This is a post from HackRead.com Read the original post: 6 Quadrillion Token Heist Hits BNB Chain-Based DeFi Protocol Ankr...
Festo 多款产品安全漏洞
Festo product is a range of automation solutions from the German company Festo. A security vulnerability exists in a number of Festo products, which stems from the possibility that an unauthenticated remote attacker could use functions with undocumented protocols, which could result in a complete...
Electronic Shelf Label 安全漏洞
Electronic Shelf Tags Electronic Shelf Label is a digital label management software from Electronic Shelf Tags, Inc. A security vulnerability exists in the Electronic Shelf Label protocol that stems from its lack of authentication, which allows an attacker to change the value of a label via a 433...
qs 安全漏洞
ljharb qs is a query string parser with nesting support by the individual developer Jordan Harband in the United States. A security vulnerability exists in versions prior to qs 6.10.3, which stems from parse ignoring the proto key, and can be exploited by an attacker to place an attack payload in...
Leadshop 安全漏洞
Leadshop is a free open source mall system that provides continuous update and iteration services to create the ultimate user experience! A security vulnerability exists in Leadshop v1.4.15. An attacker can exploit this vulnerability to take control of the target host by calling any function in...
GHSA-22WJ-VF5F-WRVJ Password exposure in H2 Database
The web-based admin console in H2 Database Engine through 2.1.214 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cleartext for the web admin console. Consequently, a local user or an attacker that has obtained local access through...
FileCloud 安全漏洞
FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. offering industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. A security vulnerability exists in FileCloud version 20.2 and later...
Kiali 安全漏洞
Kiali is an open source, visual management tool for the Istio microservices architecture. A security vulnerability exists in Kiali that stems from content spoofing in kiali-ui...
Meta Reportedly Fires Dozens of Employees for Hijacking Users' Facebook and Instagram Accounts
Meta Platforms is said to have fired or disciplined over two dozen employees and contractors over the past year for allegedly compromising and taking over user accounts, The Wall Street Journal reported Thursday. Some of these cases involved bribery, the publication said, citing sources and...
MAL-2022-3345 Malicious code in geocaching-express-account-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd22154955291fe6ddada5958c76a297f2e37a290111d05c984707ff2b2be18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7090 Malicious code in webbluetooth-edison-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 584e358581bfe311bfd1bb428724c5cdaefe6f28189d3e64422d4b628c5f6e6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Insyde InsydeH2O 安全漏洞
Insyde InsydeH2O is a C source from Insyde Corporation, Taiwan, which implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O IhisiSmm, which stems from the parameter buffer bei...
Insyde InsydeH2O 安全漏洞
Insyde InsydeH2O is a C source from Insyde Corporation of Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O IdeBusDxe, which arises from the vulnerability of...
Insyde InsydeH2O 安全漏洞
Insyde InsydeH2O is a C source from Insyde Corporation, Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O Int15ServiceSmm, which arises from the vulnerability...
Wasmtime 安全漏洞
Wasmtime is a standalone WebAssembly and WASI-only wasm optimization runtime open-sourced by the Bytecode Alliance. A security vulnerability exists in versions of Wasmtime prior to 2.0.2 that stems from a data leak between instances in its pool allocator...