sk-creative.de Cross Site Scripting vulnerability OBB-3230559

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sk-creative.de Cross Site Scripting vulnerability OBB-3225718

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview @skinternal/sk-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

K60570139: Rowhammer hardware vulnerability CVE-2020-10255

Security Advisory Description Modern DRAM chips DDR4 and LPDDR4 after 2015 are affected by a vulnerability in deployment of internal mitigations against RowHammer attacks known as Target Row Refresh TRR, aka the TRRespass issue. To exploit this vulnerability, the attacker needs to create certain...

PT-2023-33693 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the sk stream kill queues function, where the sk error queue is not properly purged. This could potentially lead to security vulnerabilities, although the actual impa...

CVE-2022-48252

The jokob-sk/Pi.Alert fork before 22.12.20 of Pi.Alert allows Remote Code Execution via nmapscan.php scan parameter OS Command Injection...

PT-2023-15649 · Jokob Sk · Pi.Alert

Name of the Vulnerable Software and Affected Versions: jokob-sk/Pi.Alert versions prior to 22.12.20 Description: The issue allows Remote Code Execution via nmap scan.php scan parameter OS Command Injection. Recommendations: For versions prior to 22.12.20, consider disabling access to the nmap...

CVE-2022-48252: Improper Neutralization of Special Elements used in an OS Command

The jokob-sk/Pi.Alert fork before 22.12.20 of Pi.Alert allows Remote Code Execution via nmapscan.php scan parameter OS Command Injection...

sk-domeny.sk Cross Site Scripting vulnerability OBB-3095785

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

athletic24.sk Cross Site Scripting vulnerability OBB-3094144

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-36061 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to a warning in sk stream kill queues. It was introduced in version v5.18 and fixed in version v6.0.9. The actual impact and attack plausibility have not yet been proven...

PT-2022-34944

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.6 Description The issue is related to a use-after-free UAF problem in the ip6mr sk done function when addrconf init net fails. The actual impact and attack plausibility have not yet been proven...

PT-2022-34950

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.6 Description The issue is related to the alloc sk msg function, where the gfp argument is not properly passed. This is an automated identification of a potential security issue, and its actual impact and...

PT-2022-37313 · Git +1 · Skia

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkPath::Iter::next function, SkRegion::setPath...

fei.tuke.sk Cross Site Scripting vulnerability OBB-2914909

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sk-mebli.com Cross Site Scripting vulnerability OBB-2873245

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-8001

Name of the Vulnerable Software and Affected Versions Itech Freelancer Script version 5.13 Description A critical issue has been found in the software, affecting some unknown functionality of the file /category.php. The manipulation of the sk argument leads to SQL injection. The attack can be...

CVE-2017-20134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument sk leads to sql injection. The attack may be launched remotely. The exploit has been...

PT-2025-8553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential refcount leak issue has been identified in the Linux kernel, specifically in the tipc sk create function. This issue can occur when the tipc sk insert function fails, resulti...

MAL-2022-2697 Malicious code in elements-sk-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcd0bc0a4e78c684a3994821df16c1aa2473fc887ff980f419e9d68abcc710e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...