PT-2021-15975

Name of the Vulnerable Software and Affected Versions User Registration & User Profile – Profile Builder WordPress plugin versions prior to 3.4.8 Description The issue allows high privilege users to inject JavaScript code into the 'Modify default Redirect Delay timer' setting, leading to an...

CVE-2021-24448: Improper Neutralization of Input During Web Page Generation

The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.8 does not sanitise or escape its 'Modify default Redirect Delay timer' setting, allowing high privilege users to use JavaScript code in it, even when the unfilteredhtml capability is disallowed, leading to an...

Cross-Site Request Forgery (CSRF) in babybuddy/babybuddy

✍️ Description You don't check CSRF token in following endpoint /timers/1/restart/ with PoC.html attacker able to reset timer with id equal to 1. 🕵️‍♂️ Proof of Concept // PoC.html history.pushState'', '', '/' 💥 Impact This vulnerability is capable of reset any timer...

PT-2021-4410

Name of the Vulnerable Software and Affected Versions Linux affected versions not specified Description The issue is related to a flaw in the Linux kernel's timer create system call handling mechanism, which involves a memory boundary reading error. This could potentially allow an attacker to...

ACRN post-release reuse vulnerability (CNVD-2021-49149)

ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. A post-release reuse vulnerability exists in the polling timer handler in ACRN related to devicemodel/hw/pci/virtio/.c. The vulnerability is not known. No detailed...

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

Design/Logic Flaw

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36144

CVE-2021-36144 affects the ACRN hypervisor prior to 2.5. The issue is described as a use-after-free involving a freed virtio device in the polling timer handler, within devicemodel/hw/pci/virtio/*.c. The connected sources confirm this root cause and timeline, but do not provide exploitation detai...

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

PT-2021-21134

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.5 Description: The issue is related to a use-after-free condition in the polling timer handler for a freed virtio device, specifically in the devicemodel/hw/pci/virtio/.c files. Recommendations: For versions prior to...

ACRN Resource Management Error Vulnerability

ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. A post-release reuse vulnerability exists in the polling timer handler in ACRN related to devicemodel/hw/pci/virtio/.c. The vulnerability is not known. No detailed...

CVE-2021-36144: Use After Free

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

PT-2021-29483

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.11 Description A potential issue exists due to a race condition in the snd seq timer open function. The actual impact and likelihood of an attack have not been confirmed. Recommendations For Linux Kernel...

PT-2021-29410

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue is related to a race condition in the snd seq timer open function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-25489

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: A potential issue exists due to a race condition in the snd seq timer open function. The actual impact and likelihood of an attack have not been confirmed. Recommendations: For Linux Kernel...

Profile Builder < 3.4.8 - Authenticated Stored XSS

The plugin does not sanitise or escape its 'Modify default Redirect Delay timer' setting, allowing high privilege users to use JavaScript code in it, even when the unfilteredhtml capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue As admin, put the following...

Profile Builder < 3.4.8 - Authenticated Stored XSS

The plugin does not sanitise or escape its 'Modify default Redirect Delay timer' setting, allowing high privilege users to use JavaScript code in it, even when the unfilteredhtml capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue PoC As admin, put the followin...