147 matches found
PT-2022-14431
Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In the ih264 resi trans quant 4x4 sse42 function of ih264 resi trans quant sse42.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure...
CVE-2022-1691
The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the transedit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection...
WordPress plugin Realty Workstation SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plug-in. SQL injection vulnerability exists in versions prior to WordPress Realty Workstation plugin 1.0.15,...
PT-2022-14049 · WordPress · Realty Workstation
Name of the Vulnerable Software and Affected Versions: The Realty Workstation WordPress plugin versions prior to 1.0.15 Description: The issue arises from the lack of sanitization and escaping of the trans edit parameter before its use in a SQL statement when an agent edits a transaction, leading...
trans-seed.fi Cross Site Scripting vulnerability OBB-2544514
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the compute_closed_spline() function in the trans_spline.c component of the Fig2dev file conversion tool allows a hacker to cause a service failure.
The vulnerability of the computeclosedspline function in the transspline.c component of the .fig Fig2dev conversion tool is related to pointer manipulation errors. Exploiting this vulnerability allows an attacker to cause a service failure...
123SWAP: A platform to mint and trade NFTs
By Waqas 123swap is a decentralized trans-chain network with the vision to bridge both the gap between DEX and CEX and between smart contracts across various chains. This is a post from HackRead.com Read the original post: 123SWAP: A platform to mint and trade NFTs...
mp-trans.com.pl Improper Access Control vulnerability OBB-2256288
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
DEBIAN-CVE-2021-32280
An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8...
UBUNTU-CVE-2021-32280
An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8...
fig2dev 代码问题漏洞
Xfig fig2dev is a tool for printing and exporting .fig format files. A code issue vulnerability exists in fig2dev due to a null pointer dereference in the compute closed spline function located in trans spline.c. The vulnerability is caused by a null pointer dereference in the compute closed spli...
CVE-2018-16451
The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN...
trans-ktp.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-950866 Security Researcher geeknik Helped patch 8949 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting trans-ktp.ru website and it...
Fedora Update for libssh2 FEDORA-2019-5885663621
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 29 Update: libssh2-1.9.0-1.fc29
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10...
[SECURITY] Fedora 30 Update: libssh2-1.9.0-1.fc30
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10...
What You Should Know About the Equifax Data Breach Settlement
Big-three credit bureau Equifax has reportedly agreed to pay at least $650 million to settle lawsuits stemming from a 2017 breach that let intruders steal personal and financial data on roughly 148 million Americans. Here's a brief primer that attempts to break down what this settlement means for...
[SECURITY] Fedora 28 Update: libssh2-1.8.1-1.fc28
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10...
MyEquifax.com Bypasses Credit Freeze PIN
Most people who have frozen their credit files with Equifax have been issued a numeric Personal Identification Number PIN which is supposed to be required before a freeze can be lifted or thawed. Unfortunately, if you don't already have an account at the credit bureau's new myEquifax portal, it m...
CVE-2018-3898
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The transinfo call can overwrite a buffer of size 0x104, which is more than enough to...