Naver Whale Browser 安全漏洞

Naver Whale Browser is a web browser from the Korean company Naver that supports user-defined interfaces. A security vulnerability previously existed in Naver Whale Browser 3.12.129.18, which stemmed from a default extension in Whale Browser that allowed receiving any SendMessage request from the...

PT-2022-7463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to a use-after-free issue in the port100 send complete function. The root cause is missing usb kill urb calls on the error handling path of the -probe...

PT-2022-13242 · Unknown +1 · @Uppy/Companion +1

Name of the Vulnerable Software and Affected Versions: uppy versions prior to 3.3.1 @uppy/companion versions prior to 3.3.1 Description: The issue allows for exposure of sensitive information to an unauthorized actor. It also enables incorrect authorization, where a user with URL upload access...

WordPress Send Prebuilt Emails plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Send Prebuilt Emails plugin versions = 1.0.0. Solution No patched version available...

WordPress Send Prebuilt Emails plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Send Prebuilt Emails plugin versions = 1.0.0. Solution No patched version available...

PT-2022-28936

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.16.7 Description A potential issue in the Linux Kernel may cause a panic when the ipoib send queue size is larger than expected. The actual impact and attack plausibility have not yet been proven...

PT-2025-8048

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A task leak issue in the Linux kernel has been resolved. The problem occurred in the pm8001 send abort all function, where allocated SAS tasks were not properly freed if pm8001 tag alloc...

PT-2022-13032

Name of the Vulnerable Software and Affected Versions Coming soon and Maintenance mode WordPress plugin versions prior to 3.6.8 Description The issue concerns a lack of CSRF check in the coming soon send mail AJAX action, allowing attackers to make a logged-in admin send arbitrary emails to all...

WordPress plugin Coming soon and Maintenance mode 安全漏洞

WordPress is the WordPress Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. The vulnerability is caused by the plugin's unauthorized and CSRF-checked in its comingsoonsendma...

CVE-2021-3242

DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=...

PT-2022-36826

Name of the Vulnerable Software and Affected Versions nghttp2 affected versions not specified Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The crash state indicates...

Wire webapp has an unspecified vulnerability

Wire is a chat software from a personal developer. The software supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, can make voice calls, send photos, and its original way of saying hello, PING. wire webapp has a security vulnerability, and no details of the vulnerability...

transferAndCall sends tokens twice

Handle cccz Vulnerability details Impact The Flan contract is inherited from the ERC677 contract. In the transferAndCall function of the ERC677 contract, the super.transfer and transfer functions will be called, which will cause the token to be sent twice. function transferAndCall address to,...

CVE-2021-44839

An issue was discovered in Delta RM 1.2. It is possible to request a new password for any other account using the account ID. Using the /listes/DTsendmaildata/admutilisateur/send-mail.json endpoint, a user can send a JSON array with user IDs that will have their passwords reset and new ones sent ...

CVE-2021-44839

An issue was discovered in Delta RM 1.2. It is possible to request a new password for any other account using the account ID. Using the /listes/DTsendmaildata/admutilisateur/send-mail.json endpoint, a user can send a JSON array with user IDs that will have their passwords reset and new ones sent ...

CVE-2021-44839: Weak Password Recovery Mechanism for Forgotten Password

An issue was discovered in Delta RM 1.2. It is possible to request a new password for any other account using the account ID. Using the /listes/DTsendmaildata/admutilisateur/send-mail.json endpoint, a user can send a JSON array with user IDs that will have their passwords reset and new ones sent ...

PT-2022-12243

Name of the Vulnerable Software and Affected Versions Delta RM version 1.2 Description An issue was discovered that allows requesting a new password for any other account using the account ID. A user can send a JSON array with user IDs to the "/listes/DTsendmaildata/adm utilisateur/send-mail.json...

OpenBMCS 2.4 Cross Site Request Forgery Vulnerability

OpenBMCS 2.4 CSRF Send E-mail Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your business, the OpenBMCS software has the ability to expand to hundreds of controllers. Our product c...

The vulnerability in the `client_send_params` function of the `lib/ext/pre_shared_key.c` component of the Transport Layer Security library GnuTLS, related to the use of memory after it is freed, allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the clientsendparams function in the lib/ext/presharedkey.c component of the Transport Layer Security library GnuTLS is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

PT-2024-11786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when the ipoib send queue size is increased from the default, causing a panic. The problem happens because the shift that should have been a function of the txq item siz...