Opening Hours <= 2.3.0 - Contributor+ Stored XSS via Shortcode

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC Note: A Set needs to be present op-is-op...

postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names

A flaw was found in PostgresQL. This flaw allows an attacker to benefit from a miss escaping character and leads to a SQL injection attack due to Java.sql.ResultRow.refreshRow implementation from PGSQL...

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...

PT-2023-35739

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the blkid uuid is empty, blkid probe set uuid as, and probe bcachefs functions. N...

transferOwnership() fails to detect that the new potential owner is not already set.

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. transferOwnership fails to detect that the new potential owner is not already set. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant...

CVE-2023-24039

A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via the dtprintinfo setuid binary to escalate their privileges to root on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer...

SWC-109 Uninitialized Storage Pointer

Lines of code Vulnerability details Impact Uninitialized storage variables can point to unexpected storage locations. Proof of Concept // Exploitable Vulnerability MemoryPointer callData; Tools Used github Recommended Mitigation Steps // Initialize variable "callData" or set the storage attribute...

CGAL Nef_2 PM_io Parser Heap Buffer Overflow DoS

The vulnerability of the PMioparser function in the Nef2/PMioparser.h component, located in the computational geometry library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause servi...

PT-2023-15133

Name of the Vulnerable Software and Affected Versions tmux versions 3.0 through 3.3 Description A null pointer dereference issue was discovered in the window pane set event function in window.c, allowing attackers to cause denial of service or other unspecified impacts. Recommendations For tmux...

TOTOLINK A7100RU: Operating System Command Injection Vulnerability

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOlink A7100RU version V7.4cu.2313B20191024, which stems from the servername parameter of the set/delStaticDhcpRules method containing a command...

SM_io Parser Heap Buffer Overflow DoS

The vulnerability of the SMio parser function in the decorator::readvertex and setfirstoutedge components of the NefS2/SMio parser library, part of the Computational Geometry Library CGAL, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to...

GSD-2023-1001621 regulator: core: fix module refcount leak in set_supply()

regulator: core: fix module refcount leak in setsupply This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1000554 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq

usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000543 fbdev: fbcon: release buffer when fbcon_do_set_font() failed

fbdev: fbcon: release buffer when fbcondosetfont failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-34528

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A potential security issue exists due to a module refcount leak in the set supply function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2023-34670

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.33 through 4.9.336 Description The issue is related to a use-after-free error in the gru set context option, gru fault, and gru handle user call os functions. This error was introduced in version v2.6.33 and fixed in...

PT-2023-34223

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A potential security issue exists due to a module refcount leak in the set supply function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2023-33856

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the drm: lcdif: Set and enable FIFO Panic threshold. It was introduced in version v6.0 and fixed in version v6.0.16. The actual impact and attack plausibility have not...

PT-2023-33820

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A potential security issue exists due to a module refcount leak in the set supply function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2023-33992

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to a NULL pointer dereference in the imgu subdev set selection function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...