MyBB SQL注入漏洞

MyBB is a free open source forum software. A SQL injection vulnerability exists in vote counting in versions of MyBB prior to 1.8.26, no details of the vulnerability are available at this time...

PT-2021-17686 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.26 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the poll vote count. Recommendations: For versions prior to 1.8.26, update to version 1.8.26 or later to resolve the iss...

CVE-2019-25022

An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime.exec without validation...

PT-2021-14378 · Unknown · Tendermint Core

Name of the Vulnerable Software and Affected Versions: Tendermint Core versions 0.34.0 through 0.34.2 Description: The issue arises from the mishandling of timestamps during the consensus process in Tendermint Core, which can cause a denial of service. When double signs are observed, the consensu...

Tendermint Resource Management Error Vulnerability

Tendermint is a Byzantine Fault Tolerant BFT style middleware from Tendermint, Inc. in the United States. A security vulnerability exists in Tendermint Core, which stems from the fact that any node with an invalid DuplicateVoteEvidence will present invalid evidence...

CVE-2020-35624

An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded...

Design/Logic Flaw

An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded...

CVE-2020-35624

CVE-2020-35624 affects the SecurePoll extension for MediaWiki up to version 1.35.1. The non-admin vote list includes a full vote timestamp, which may reveal unintended clues about how a voting process unfolded. The provided description does not specify an exploitation method, affected products be...

CVE-2020-35624

An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded...

PT-2020-17371 · Mediawiki +1 · Mediawiki Securepoll Extension +1

Name of the Vulnerable Software and Affected Versions: MediaWiki SecurePoll extension versions through 1.35.1 Description: An issue in the SecurePoll extension for MediaWiki may provide unintended clues about how a voting process unfolded due to the non-admin vote list containing a full vote...

2020 Was a Secure Election

Over at Lawfare: "2020 Is An Election Security Success Story So Far." What’s more, the voting itself was remarkably smooth. It was only a few months ago that professionals and analysts who monitor election administration were alarmed at how badly unprepared the country was for voting during a...

Crippling Cyberattacks, Disinformation Top Concerns for Election Day

What keeps researchers up at night leading up to Nov. 3 isn’t election-day winners and losers. Most cite possible attacks on local infrastructure, crippling ransomware incidents and disinformation campaigns. There are also many concerned voters this year. Election-related cybersecurity attacks ha...

US Postal Service Files Blockchain Voting Patent

The US Postal Service has filed a patent on a blockchain voting method: Abstract: A voting system can use the security of blockchain and the mail to provide a reliable voting system. A registered voter receives a computer readable code in the mail and confirms identity and confirms correct ballot...

Open Redirect Vulnerability in Joomla! (CNVD-2020-49955)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An open redirect vulnerability exists in Joomla! versions prior to 3.9.21, which...

CVE-2020-24598

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...

PT-2020-15759 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.21 Description: The issue is related to a lack of input validation in the vote feature of com content, which leads to an open redirect. Recommendations: For versions prior to 3.9.21, update to version 3.9.21 or...

Vote by Mail Isn't Perfect. But It's Essential in a Pandemic

Despite Donald Trump's invective, the spread of Covid-19 has made the expansion of absentee voting critical...

Reddit Says Influence Campaign is Behind Leaked U.S.-U.K. Trade Documents

Reddit has revealed that key U.S.-U.K. trade documents posted on its site were likely done so as part of a broader political-influence campaign that first appeared on Facebook and tied to Russia-based operatives. The online media aggregator says it has linked documents that were leaked on its sit...

OpenAFS Denial of Service Vulnerability (CNVD-2019-43378)

OpenAFS is a set of open source distributed file system , allowing systems to share files and resources through the local area and wide area network . A denial of service vulnerability exists in OpenAFS. An attacker could exploit this vulnerability by making a series of VOTEDebug RPC calls to cau...

DEBIAN-CVE-2019-18601

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...