undertow: Double AJP response for 400 from EAP 7 results in CPING failures

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second...

undertow: Double AJP response for 400 from EAP 7 results in CPING failures

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second...

Updated curl packages fix security vulnerability

When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. CVE-2022-32221...

PT-2022-37830

Уязвимость функции virtual nci send модуля drivers/nfc/virtual ncidev.c драйвера NFC ядра операционной системы Linux связана с неправильным освобождением памяти «утечка памяти». Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...

PT-2025-37597

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1 28 Description The Linux kernel contains a vulnerability in the io uring/msg ring component. A NULL pointer dereference exists in the io msg send fd function when file ptr is NULL, leading to a crash...

DEBIAN-CVE-2022-39282

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

# Arbitrary send of non protected function may lead into loss of funds

Lines of code Vulnerability details Arbitrary send of non protected function may lead into loss of funds Impact Unprotected call to a function sending Ether to an arbitrary address may lead into loss of funds. Proof Of Concept In BlurExchange.sol, method trasnferTo uses an arbitrary user to send...

Improper access control

An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and send emails with arbitrary text content to the configured installation-administrator contact address, via HTTP access to an accidentally exposed internal...

CVE-2022-40118

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/sendfundsaction.php...

CVE-2022-40113

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/sendfunds.php...

PT-2022-25216

Name of the Vulnerable Software and Affected Versions Online Banking System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the cust id parameter at the "/net-banking/send funds.php" API endpoint. Recommendations For Online Banking System...

Online Banking System SQL注入漏洞

Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that stems from a SQL injection issue in the custid parameter in the /net-banking/sendfunds.php location. No detailed vulnerability details are available at...

PT-2022-34133

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.137 Description A potential memory leak issue was identified in the mt76x02u mcu send msg function of the mt76x02u driver. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-34192

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.212 Description The issue concerns a NULL pointer dereference in the steam recv report and steam send report functions. This problem was introduced in version v4.18 and is fixed in version v5.4.212. The actu...

PT-2022-33884 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A potential memory leak issue exists in the mt76x02u mcu send msg function of the mt76x02u driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34336 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.257 Description: The issue concerns a NULL pointer dereference in the steam recv report and steam send report functions. This problem was introduced in version v4.18 and is fixed in Linux Kernel version...

PT-2022-33681

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.65 Description The issue concerns a NULL pointer dereference in the steam recv report and steam send report functions. This problem was introduced in version v4.18 and is fixed in version v5.15.65. The actu...

PT-2022-33272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.7 Description The issue concerns a NULL pointer dereference in the steam recv report and steam send report functions. This problem was introduced in version v4.18 and is fixed in version v5.19.7. The actual...

SAMSUNG Mobile devices 资源管理错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A resource management error vulnerability exists in the SMR Sep-2022 Release 1 version of SAMSUNG Mobile devices, which stems from a post-release reuse vulnerability in the...

Sql injection

Tabit - arbitrary SMS send on Tabits behalf. The resend OTP API of tabit allows an adversary to send messages on tabits behalf to anyone registered on the system - the API receives the parameters: phone number, and CustomMessage, We can use that API to craft malicious messages to any user of the...