WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA version v3.2.0. An attacker exploiting this vulnerability could perform a cross-site request forgery attack...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA version v3.2.0. An attacker can exploit the vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload with the id or name...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from an incorrect input validation in mtkp2pwextsetkey in drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glp2p.c. An out-of-bounds write may exist...

Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞

Lorex 2K Indoor Wi-Fi Security Camera is a series of security cameras from Lorex Canada. A security vulnerability previously existed in Lorex 2K Indoor Wi-Fi Security Camera version 2.800.0000000.8.R.20241111. An attacker could exploit this vulnerability to perform an out-of-bounds heap read in t...

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for network, system and application resources. A security vulnerability exists in Centreon, which stems from a SQL injection issue in the user settings form. Th...

Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞

Lorex 2K Indoor Wi-Fi Security Camera is a series of security cameras from Lorex Canada. A security vulnerability previously existed in Lorex 2K Indoor Wi-Fi Security Camera version 2.800.0000000.8.R.20241111. An attacker could exploit this vulnerability to perform null pointer dereferencing in t...

TP-Link Archer 安全漏洞

TP-LINK Archer is a series of routers from China's Universal Link TP-LINK. A security vulnerability exists in TP-Link Archer that stems from the presence of a certified Remote Code Execution RCE vulnerability...

Rizin 安全漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...

SiYuan 安全漏洞

SiYuan is a privacy-first personal knowledge management system from SiYuan open source. A security vulnerability exists in SiYuan version 3.1.11, which stems from an SQL injection vulnerability contained in the id parameter of the /getAssetContent file...

Siyuan 安全漏洞

SiYuan is a privacy-first personal knowledge management system from SiYuan open source. A security vulnerability exists in Siyuan version 3.1.11, which stems from an SQL injection vulnerability contained in the notebook parameter of the /searchHistory file...

MAL-2024-11025 Malicious code in aa-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd321f0852dcc9dfd3186bbde3c8ba367be98c8f8f47d93954672d5f7c702bf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10995 Malicious code in pmto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cab6d5c183f9d9ae1caa6a140cfe73761fe0db12d3067e9e393fdfc86f89b1a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10952 Malicious code in cfc-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e9bcf726b0cddf43089f7e5225471ba86fc21687c8987ec61276e9196dd994 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Taiga 安全漏洞

Taiga is a free open source project management tool from Taiga Open Source. A security vulnerability exists in Taiga version v6.8.1, which stems from the inclusion of a CSV injection issue that could lead to arbitrary code execution...

MAL-2024-10920 Malicious code in conibase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e70af172c9db7c1934d326429c7bc63ed721d3934ada0d8197542fb231535fec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rootkitfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f464c06e5146e96a9feed234e30390194912e24838433cad3daab70ecb350b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Taiga 安全漏洞

Taiga is a free open source project management tool from Taiga Open Source. A security vulnerability exists in Taiga version 8.6.1 that originates from a remote attacker who can execute arbitrary code by injecting a malicious payload into new project details...

BoidCMS 安全漏洞

BoidCMS is a free open source flat file CMS from BoidCMS Open Source for building simple websites and blogs, developed in PHP and using JSON as the database. A security vulnerability exists in BoidCMS 2.1.1 and earlier versions, which stems from a Reflected Cross-Site Scripting XSS vulnerability ...

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems, and applications. A security vulnerability exists in Centreon that stems from a possible SQL injection when creating wo...

Visteon Infotainment 安全漏洞

Visteon Infotainment is an automotive infotainment system from Visteon Corporation USA. A security vulnerability exists in Visteon Infotainment that stems from the lack of a properly configured hardware trust root in the application system-on-chip SoC configuration, which could allow a local...