PT-2024-21481

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10 Description A vulnerability has been resolved in the Linux kernel. The issue was reported by Syzkaller after it hit a warning when failing to allocate resources for skb in hsr init skb. To address this, the...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_test_responder_chunk_send_ack_case1

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=6712269464469504 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

DEBIAN-CVE-2023-47430

Stack-buffer-overflow vulnerability in ReadyMedia MiniDLNA v1.3.3 allows attackers to cause a denial of service via via the SendContainer function at tivocommands.c...

UBUNTU-CVE-2023-47430

Stack-buffer-overflow vulnerability in ReadyMedia MiniDLNA v1.3.3 allows attackers to cause a denial of service via via the SendContainer function at tivocommands.c...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_copy_mem

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=5274620108275712 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_copy_mem

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=6677017594494976 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

CVE-2024-2585

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/selectsend2.php, in the 'sdindex' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB...

AMSS++ SQL Injection Vulnerability

AMSS++ is a tool for the office management support system of Amssplus. An SQL injection vulnerability exists in AMSS++ version 4.31, which stems from an SQL injection vulnerability in the sdindex parameter of the /amssplus/modules/book/main/selectsend2.php page...

AMSS++ Cross-Site Scripting Vulnerability

AMSS++ is a tool for the office management support system of Amssplus. A cross-site scripting vulnerability exists in AMSS++ version 4.31, which stems from a cross-site scripting vulnerability in multiple parameters on the /amssplus/modules/mail/main/selectsend.php page...

PT-2024-21243 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue is related to insufficient encoding of user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through the "/amssplus/modules/mail/main/select send.php" endpoint, in multiple...

PT-2024-21162

Name of the Vulnerable Software and Affected Versions AMSS++ version 4.31 Description The issue allows SQL injection through the /amssplus/modules/book/main/select send 2.php API endpoint, specifically in the sd index parameter. This could enable a remote attacker to send a specially crafted SQL...

PT-2024-21254 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue is related to insufficient encoding of user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through the /amssplus/modules/book/main/select send 2.php endpoint, in multiple...

CVE-2024-2561

A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controller/company/Index.phpsendCompanyLogo of the component Company Logo Handler. The manipulation of the argument imgBase64 leads to unrestricte...

74CMS 安全漏洞

74CMS is an online recruitment system based on PHP and MySQL. A file upload vulnerability exists in version 3.28.0 of 74CMS, which stems from the lack of valid validation of the uploaded file by imgBase64, a parameter of the function sendCompanyLogo in file /controller/company/Index.php. The...

Whoogle Search Cross-site Scripting vulnerability

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the element method in app/routes.py does not validate the user-controlled srctype and elementurl variables and passes them to the send method which sends a GET request on lines 339-343 in requests.py. The returned...

GHSA-3Q6G-QMPX-RQW4 Whoogle Search Server-Side Request Forgery vulnerability

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the window endpoint does not sanitize user-supplied input from the location variable and passes it to the send method which sends a GET request on lines 339-343 in request.py, which leads to a server-side request...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_test_responder_chunk_send_ack_case1

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=6659911863828480 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

FreeScout Log Information Disclosure Vulnerability

FreeScout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework. A log message disclosure vulnerability exists in FreeScout versions prior to 1.8.124, which stems from a log message disclosure vulnerability in the component...

PT-2024-22319

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.124 Description A vulnerability has been identified in the FreeScout Application, which exposes SMTP server credentials used by an organization in the application to users of the application. This issue arises...

PT-2024-21761 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible null pointer dereference in the ss SendCallBarringPwdRequiredIndMsg function of ss CallBarring.c due to a missing nul...