PT-2022-22845 · Sourcecodester · Sourcecodester Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Cold Storage Management System version 1.0 Description: A problem was found in the Setting Handler component, specifically affecting the /csms/admin/?page=system info file. The issue arises from the manipulation of the...

PT-2022-25873 · Unknown · Picuploader

Name of the Vulnerable Software and Affected Versions: PicUploader version 2.6.3 Description: A cross-site scripting XSS issue was found in the setStorageParams function within SettingController.php. Recommendations: For PicUploader version 2.6.3, update the SettingController.php file to fix the...

PicUploader 跨站脚本漏洞

PicUploader is a graphic bed tool written in php by Bruce's personal developer. It helps you to quickly upload your images to a cloud image bed and automatically return Markdown-formatted links to the clipboard. A security vulnerability exists in PicUploader version v2.6.3, which stems from a...

Tenda AC18 fast_setting_wifi_set stack overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. Tenda AC18 V15.03.05.19 suffers from a stack overflow vulnerability, which stems from the fastsettingwifiset function not performing a size check on incoming data, and can be exploited by an attacker to cause remote code execution or deni...

Tenda AC15 fast_setting_wifi_set stack overflow vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda AC15 router version V15.03.05.19, which originates from the list parameter of the fastsettingwifiset function that does not perform a size check on the input data, and can be exploit...

CVE-2022-3076

The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example...

CVE-2022-3076 CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload

The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example...

CVE-2022-40854

Tenda AC18 router contained a stack overflow vulnerability in /goform/fastsettingwifiset...

CVE-2022-40862

Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting...

CVE-2022-3144

The Wordfence Security – Firewall & Malware Scan plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 7.6.0 via a setting on the options page due to insufficient escaping on the stored value. This makes it possible for authenticated users, with...

CVE-2022-3144

The Wordfence Security – Firewall & Malware Scan plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 7.6.0 via a setting on the options page due to insufficient escaping on the stored value. This makes it possible for authenticated users, with...

Tenda AC15 缓冲区错误漏洞

Tenda AC15 and Tenda AC18 are both products of Tenda, a Chinese company.Tenda AC15 is a wireless router.Tenda AC18 is a router. A stack overflow vulnerability exists in Tenda AC15 and AC18 version V15.03.05.19, which stems from the fromNatStaticSetting method not size-checking the input data when...

Tenda AC15 缓冲区错误漏洞

The Tenda AC15 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda AC15 router version V15.03.05.19, which originates from the list parameter of the fastsettingwifiset function that does not perform a size check on the input data, and can be exploit...

CVE-2022-40089

A remote file inclusion RFI vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allowurlinclude is set to On...

kernel security, bug fix, and enhancement update

5.14.0-70.26.1.0.10.OL9 - lockdown: also lock down previous kgdb use Daniel Thompson Orabug: 34290418 CVE-2022-21499 5.14.0-70.26.10.OL9 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted...

CVE-2022-40075

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formfastsettingwifiset...

CVE-2022-40075

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formfastsettingwifiset...

Tenda AC21 缓冲区错误漏洞

Tenda AC21 is a wireless router from Tenda China. Tenda AC21 V16.03.08.15 is vulnerable to a buffer overflow vulnerability, which originates in the formfastsettingwifiset function of /bin/httpd for lack of length checking of input data, and can be exploited by an attacker to cause httpd to restar...

GSD-2022-1006266 arm64: fix oops in concurrently setting insn_emulation sysctls

arm64: fix oops in concurrently setting insnemulation sysctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006054 arm64: fix oops in concurrently setting insn_emulation sysctls

arm64: fix oops in concurrently setting insnemulation sysctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...