Xbtit SQL注入漏洞

Xbtit is an open source tracker software. version 3.1 of Xbtit is vulnerable to SQL injection, which stems from a missing filter escape for SQL statements in the sid parameter of the ajaxchat/getHistoryChatData.php file. An attacker could exploit this vulnerability to extract sensitive data such ...

CVE-2020-25721

Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...

CVE-2020-25721

Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...

CVE-2020-25721

Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...

CVE-2020-25721

Samba AD DC is affected by CVE-2020-25721, where Kerberos acceptors could obtain a stable AD identifier (SID and samAccountName) in issued tickets. This concerns Samba used as an AD DC on Linux; the root issue is Samba not providing reliable SID information in Kerberos tickets. Exploitation conte...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. An infinite loop vulnerability exists in gpac in the gflog function, which causes a Denial of Service...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. A null pointer dereference vulnerability exists in gpac in the gfnodegettag function, which causes a segmentation fault and application crash...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. There is a heap-based buffer overflow in the function gprtpbuilderdotx3g function in ietf/rtppck3gpp.c, as demonstrated by MP4Box. This can cause a denial of service DOS...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. The trakboxsize function in GPAC allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. The gfhinterfinalize function allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. A Null Pointer Dereference vulnerability exitgs in GPAC in MP4Box via strlenavx2, which causes a Denial of Service...

Heap Buffer Overflow

mujs:sid is vulnerable to heap buffer overflow. The vulnerability is caused by conflicting JumpList of nested try/finally statements...

NULL Pointer Dereference

gpac:sid is vulnerable to null pointer dereference. The vulnerability exists in gpac in the lsrreadid.part function, which causes a segmentation fault and application crash...

Improper Verification Of Signature

libreoffice:sid is vulnerable to Improper Verification of Cryptographic Signature. The vulnerability is manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to contain both X509Data and KeyValue children of the KeyInfo tag. When opened, it causes LibreOffice t...

Out-of-bounds Memory Access

chromium:sid is vulnerable to out of bounds memory access. The vulnerability exist in A.scad file with no trailing newline allowing an out-of-bounds read during parsing of annotations...

SpoolFool

This is a code analysis of the AddUser repository. Classification: Exploit module/toolkit targeting Windows systems. Primary CVE ID: Not explicitly stated, but the code appears to be related to the exploitation of a vulnerability in the Windows NetAPI32 library. Target product/service: Windows...

CVE-2021-46308

An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter...

Denial Of Service (DoS)

binaryen:sid is vulnerable to denial of service. The vulnerability exits due to an assertion abort in wasm::handleunreachable...

SUSE-RU-2021:4173-1 Recommended update for samba

This update for samba fixes the following issues: The username map advice from the CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails bsc1192849...

SUSE-RU-2021:4149-1 Recommended update for samba

This update for samba fixes the following issues: The username map advice from the CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails bsc1192849...