CVE-2024-7437 SimpleMachines SMF Delete User index.php resource injection

A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile;u=2;area=showalerts;do=remove of the component Delete User Handler. The manipulation of the argument aid leads to improper control of...

CVE-2024-7437 SimpleMachines SMF Delete User index.php resource injection

A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile;u=2;area=showalerts;do=remove of the component Delete User Handler. The manipulation of the argument aid leads to improper control of...

CVE-2024-7437

Affected software: SimpleMachines SMF 2.1.4. Vulnerability exists in the Delete User Handler component: /index.php?action=profile;u=2;area=showalerts;do=remove, where manipulation of the aid argument leads to improper control of resource identifiers. It enables remote attack and has publicly disc...

CVE-2024-7437 SimpleMachines SMF Delete User index.php resource injection

A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile;u=2;area=showalerts;do=remove of the component Delete User Handler. The manipulation of the argument aid leads to improper control of...

CVE-2023-47346

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

Buffer overflow

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

CVE-2023-47346

CVE-2023-47346 affects free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0. The root cause is a Buffer Overflow in PFCP message handling, which can be exploited to cause a Denial of Service. Several sources confirm the vulnerability and its impact; remediation guidance consistently states upgrading to a fixe...

CVE-2023-47346

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

CVE-2023-47346

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

CVE-2023-47346

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

smf-bg.com Cross Site Scripting vulnerability OBB-3233560

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SimpleMachinesForum v2.1.1 - Authenticated Remote Code Execution

Exploit Title: SimpleMachinesForum v2.1.1 - Authenticated Remote Code Execution Exploit Author: Sarang Tumne @CyberInsane Twitter: @thecyberinsane Date: 7th March 2022 CVE ID: CVE-2022-26982 Confirmed on release 2.1.1 Vendor: https://download.simplemachines.org/ Note- Once we insert the vulnerabl...

Memory corruption

open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PFCP packet...

CVE-2022-43222

Open5GS v2.4.11 is affected by a memory leak in src/smf/pfcp-path.c that can be exploited to cause a Denial of Service via crafted PFCP packets. The CVE entry documents a HIGH severity (CVSS 3.1 v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Connected sources corroborate the vulnerability in the mem...

Oracle Solaris Critical Patch Update : apr2020_SRU11_4_19_3_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Sun ZFS Storage Appliance Kit product of Oracle Systems component: Operating System Image. The supported version that is affected is 8.8. Difficult to exploit vulnerability allows low...

Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: SMF command svcbundle. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2020-2749

CVE-2020-2749 affects Oracle Solaris 11, specifically the SMF command svcbundle component. The vulnerability is local (LOCAL) with HIGH complexity and requires user interaction. It allows a low-privilege attacker with logon to compromise Solaris, risking unauthorized updates, inserts, or deletion...

CVE-2020-2749

Vulnerability in the Oracle Solaris product of Oracle Systems component: SMF command svcbundle. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2020-2749

Vulnerability in the Oracle Solaris product of Oracle Systems component: SMF command svcbundle. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2019-11574

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...