Race condition

Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally...

CVE-2022-48509

Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally...

CVE-2022-48509

Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally...

CVE-2022-48509

CVE-2022-48509 describes a race condition in Huawei Share within Huawei HarmonyOS caused by multi-thread access to mutually exclusive resources. The vulnerability may cause the affected program to exit abnormally if exploited. Based on available sources, the issue is a race condition with impact ...

PT-2023-15835 · Huawei · Huawei Share

Name of the Vulnerable Software and Affected Versions: Huawei Share affected versions not specified Description: A race condition vulnerability exists due to multi-thread access to mutually exclusive resources. This issue may cause the program to exit abnormally when successfully exploited...

WordPress Simple Light Weight Social Share (Tweet, Like, Share and Linkedin) Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Light Weight Social Share Tweet, Like, Share and Linkedin Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-37388 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID...

Potential Unauthorized Flash Loan Execution and Share Burning due to Lack of Permission Checks

Lines of code Vulnerability details Impact The executeFlashloan function in the provided contract allows any user to execute a flash loan on behalf of another user without explicit permission. This could potentially lead to an unauthorized execution of flash loans and unexpected share burnings if...

Automattic: Entering passwords on the Share Login Page can lead to a brute-force attack

The Share Login Page on the Crowdsignal platform had a vulnerability that allowed for brute-force attacks on passwords. This could potentially grant unauthorized access to sensitive information such as Results, Answer Details, Devices, Locations, and Participants...

CVE-2023-23539

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...

CVE-2023-23539

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...

CVE-2023-23539

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...

CVE-2023-35155 XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. For instance, the following URL execute an alter on the browser:...

Buffer overflow

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...

CVE-2023-23539

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...

CVE-2023-23539

CVE-2023-23539 affects macOS Ventura (13.2) and is tied to a buffer overflow in the Samba/network share handling (dcerpc path) that could allow arbitrary code execution when mounting a malicious Samba share. Apple confirms the fix in Ventura 13.2. Public references in the connected records corrob...

CVE-2023-23539

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura prior to version 13.2, which stems from a buffer overflow issue, where mounting a maliciously crafted Samba network share could lead to arbitrary code...

XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email

Impact Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. For instance, the following URL execute an alter on the browser:...

GCP ESPv2 Hit with Critical API Authorization Bypass CVE-2023-30845

This post delves into a very impactful JWT Authentication Bypass vulnerability CVE-2023-30845 found in ESP-v2, an open-source service proxy that provides API management capabilities using Google Service Infrastructure. This vulnerability allows malicious API clients to bypass JWT authentication...

CVE-2023-2779

The Social Share, Social Login and Social Comments WordPress plugin before 7.13.52 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...