11989 matches found
Design/Logic Flaw
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...
CVE-2021-46955
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...
CVE-2021-41852
Rejected reason: This is unused...
CVE-2023-52441
CVE-2023-52441 affects the Linux kernel ksmbd component. The vulnerability is an out-of-bounds issue in init_smb2_rsp_hdr() that occurs when a client issues an SMB2 negotiate followed by SMB1 negotiate; the code could incorrectly treat SMB1 packets as SMB2, triggering an out-of-bounds path. The a...
ITFlow Cross Site Request Forgery
CVE: CVE-2024-25344 CWE: CWE-352 Vendor: ITFlow.org Affected product: ITFlow - Before commit 432488eca3998c5be6b6b9e8f8ba01f54bc12378 Discoverer: stehled, WP-Pomoc.cz Attack-Type: Remote AV: Admin user has to open a page, provided by an attacker, which will then perform malicious request changing...
WonderCMS 4.3.2 Cross Site Scripting / Remote Code Execution
Author: prodigiousMind Exploit: Wondercms 4.3.2 XSS to RCE import sys import requests import os import bs4 if lensys.argv4: print"usage: python3 exploit.py loginURL IPAddress Port\nexample: python3 exploit.py http://localhost/wondercms/loginURL 192.168.29.165 5252" else: data = ''' var url =...
CVE-2024-20974
...
CVE-2024-20943
...
CVE-2024-20931
...
CVE-2024-20927
...
CVE-2024-20919
...
CVE-2024-20907
...
Login as User or Customer <= 3.8 - Admin Account Takeover
Description The plugin does not prevent users to log in as any other user on the site. 1. As an admin, log in as some user. Note the user ID. 2. Run the following curl command, filling in the ADMINID and the USERID: curl -v https://example.com/wp-admin/admin-ajax.php -H 'Cookie:...
CVE-2023-52395
Rejected reason: This is unused...
CVE-2023-43749
Rejected reason: This is unused...
CVE-2023-45738
Rejected reason: This is unused...
Open redirect
Rejected reason: This is unused...
CVE-2024-1216
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Intel Extreme Tuning Utility (XTU) February 2024 Security Update
Intel has informed HP of potential security vulnerabilities in some IntelĀ® Extreme Tuning Utility XTU software, which might allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...