Server Side Template Injection (SSTI)

Summary Due to the unrestricted access to twig extension class from grav context, an attacker can redefine config variable. As a result, attacker can bypass previous patch. Details The twig context has a function declared called getFunction. php public function getFunction$name if...

The vulnerability of the caching mechanism of the declarative delivery tool for GitOps in Kubernetes Argo CD allows attackers to circumvent security restrictions and execute an brute-force attack.

The vulnerability of the caching mechanism for the declarative delivery tool in GitOps for Kubernetes Argo CD lies in the absence of restrictions on authentication attempts when processing the defaultMaxCacheSize parameter. Exploiting this vulnerability allows a malicious actor to bypass security...

The vulnerability of the microprogramming software for UniLogic Studio series UniStream, related to errors in processing the relative path to the directory, allows attackers to bypass security restrictions and execute arbitrary code.

The vulnerability of the microprogramming software for UniLogic Studio series UniStream is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows an attacker to bypass security restrictions and execute arbitrary code...

The vulnerability of microprogrammed software in multifunctional measuring instruments for measuring parameters of electrical networks Siemens SENTRON 7KM PAC, related to access control deficiencies, allows intruders to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerability of microprogrammed multifunctional measuring instruments for measuring parameters of electrical networks from Siemens SENTRON 7KM PAC is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

CVE-2024-28116 Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass

Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-Side Template Injection SSTI, which allows any authenticated user editor permissions are sufficient to execute arbitrary code on the remote server bypassing the existing securit...

Google Chrome Security Bypass Vulnerability (CNVD-2024-16881)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from a misimplementation issue with Downloads. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome Security Bypass Vulnerability (CNVD-2024-16877)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from an incorrect security UI in iOS. An attacker can exploit this vulnerability to bypass security restrictions...

Apache Doris 竞争条件问题漏洞

Apache Doris is a modern MPP analytic database product of the U.S. Apache Apache Foundation. Can provide sub-second queries and efficient real-time data analysis. Apache Doris has a security bypass vulnerability that stems from the use of the chmod function, which can be exploited by an attacker ...

Multiple Mozilla product security bypass vulnerabilities (CNVD-2024-14980)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security bypass vulnerability exists in several Mozilla products, whic...

Google Chrome Security Bypass Vulnerability (CNVD-2024-16875)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from a mal-execution issue in iOS. An attacker can exploit this vulnerability to bypass security restrictions...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-14982)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox that stems from improper handling of WASM register values. An attacker can exploit the vulnerability to create invalid wasm values...

Google Chrome Security Bypass Vulnerability (CNVD-2024-16878)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from a mal-execution issue in iOS. An attacker can exploit this vulnerability to bypass security restrictions...

PT-2024-14493 · Pdfcrowd · Save As Pdf Plugin

Name of the Vulnerable Software and Affected Versions: Save as PDF plugin by Pdfcrowd Word Replacer Pro versions n/a through 1.0 Description: The issue is related to a Missing Authorization vulnerability in the Save as PDF plugin by Pdfcrowd Word Replacer Pro. This allows for a security bypass...

The vulnerability of Adobe Experience Manager’s content and media data management system, related to inadequate access control mechanisms, allows attackers to circumvent existing security restrictions and gain unauthorized access to the application.

The vulnerability of the Adobe Experience Manager content and media data management system is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions and gain unauthorized access to the application...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from a mal-execution issue in iOS. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from a misimplementation issue with Downloads. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from a mal-execution issue in iOS. An attacker can exploit this vulnerability to bypass security restrictions...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security bypass vulnerability exists in several Mozilla products, whic...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from an incorrect security UI in iOS. An attacker can exploit this vulnerability to bypass security restrictions...

CVE-2024-22412 ClickHouse's Role-based Access Control is bypassed when query caching is enabled.

ClickHouse is an open-source column-oriented database management system. A bug exists in the cloud ClickHouse offering prior to version 24.0.2.54535 and in github.com/clickhouse/clickhouse version 23.1. Query caching bypasses the role based access controls and the policies being enforced on roles...