SUSE CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

SUSE CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

XSS Stored in the email address

Description Hello, I have located an xss stored by performing the following step: 1 - Go to tools 2 - GDPR Data Extractor 3 - Insert the payload into the email address 4 - click in send emails Proof of Concept...

Splunk 安全漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

PT-2023-34969 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.10 Description: The issue is related to the bpf in the Linux Kernel, specifically in the send signal common function, where a task with pid=1 is skipped. The actual impact and attack plausibility have not y...

PT-2023-35349

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.270 Description The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, specifically the pn533 driver. It involves waiting for the completion of out urb in this...

PT-2023-35210

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.167 Description The issue is related to the bpf in the Linux Kernel, specifically with skipping tasks with pid=1 in send signal common. The actual impact and attack plausibility have not yet been proven...

PT-2023-35274

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description The issue is related to the bpf in the Linux Kernel, specifically with skipping tasks with pid=1 in send signal common. The actual impact and attack plausibility have not yet been proven...

PT-2023-35127 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.92 Description: The issue is related to the bpf in the Linux Kernel, specifically with skipping tasks with pid=1 in send signal common. The actual impact and attack plausibility have not yet been proven...

PT-2023-35372

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.303 Description The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, where it does not wait for out urb's completion. This could potentially lead to security...

PT-2023-35197

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.89 Description The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, specifically the pn533 driver. It involves waiting for out urb's completion. The actual impact a...

Cross site scripting

The Send PDF for Contact Form 7 WordPress plugin before 0.9.9.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used again...

PT-2023-16032

Name of the Vulnerable Software and Affected Versions Send PDF for Contact Form 7 WordPress plugin versions prior to 0.9.9.2 Description The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such a...

WordPress Plugin Send PDF for Contact Form 7 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. A cross-site scripting...

CVE-2023-0143: Undefined Security Weakness

The Send PDF for Contact Form 7 WordPress plugin before 0.9.9.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used again...

GSD-2023-1001791 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()

nfc: pn533: Wait for outurb's completion in pn533usbsendframe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

PT-2023-34917

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.303 Description The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, specifically with the pn533 driver. It involves waiting for the completion of out urb in this...

PT-2023-9596

Name of the Vulnerable Software and Affected Versions Sentry SDK versions prior to 1.14.0 Description The issue is related to the leakage of sensitive cookie values, including session cookies, to Sentry when using the Django integration of the Sentry SDK in a specific configuration. This can occu...

GSD-2023-1000760 media: imon: fix a race condition in send_packet()

media: imon: fix a race condition in sendpacket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33837

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 6.0.15 Description A race condition was found in the send packet function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version 2.6.35 and fixed in versio...