480 matches found
PT-2022-17842 · Mediatek +2 · Mt6833 +2
Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue involves a possible out of bounds write due to type confusion in the mailbox. This could lead to local escalation of privilege, with Syst...
PT-2022-15771 · Western Digital +1 · Sweet B Library +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue occurs when compressing or decompressing a point on the NIST P-256 elliptic curve with an X coordinate of zero. The resulting output is not...
TP-Link Router AX50 firmware 210730 - Remote Code Execution (Authenticated) Exploit
Exploit Title: TP-Link Router AX50 firmware 210730 - Remote Code Execution RCE Authenticated Exploit Author: Tomas Melicher Technical Details: https://github.com/aaronsvk/CVE-2022-30075 Vendor Homepage: https://www.tp-link.com/ Tested On: Tp-Link Archer AX50 Vulnerability Description: Remote Code...
Exploit for Cross-site Scripting in Angtech Haraj
CVE-2022-31301 Haraj Script 3.7 - Post Ads Authenticated Store...
PHP Object Injection Vulnerability in Booking Calendar Plugin
On April 18, 2022, the Wordfence Threat Intelligence team initiated the responsible disclosure process for an Object Injection vulnerability in the Booking Calendar plugin for WordPress, which has over 60,000 installations. We received a response the same day and sent over our full disclosure ear...
The vulnerability of the PHP programming language interpreter arises from insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the PHP programming language interpreter exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
Joomla Sexy Polling 2.1.7 SQL Injection
SexyPolling SQL Injection ==================== | Identifier: | AIT-SA-20220208-01| | Target: | Sexy Polling Joomla Extension | | Vendor: | 2glux | | Version: | all versions below version 2.1.8 | | CVE: | Not yet | | Accessibility: | Remote | | Severity: | Critical | | Author: | Wolfgang Hotwagner...
The vulnerability of the Microsoft Windows Update Client application for the Microsoft Windows operating system allows a perpetrator to escalate their privileges.
The vulnerability of the Microsoft Windows Update Client application for the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Exploit for Code Injection in Digitaldruid Hoteldruid
CVE-2022-22909 Hotel Druid 3.0.3 - Remote Code Execution RCE...
File Descriptor Leak
Possible sensitive files Vulnerability description: A possible sensitive file has been found. This file is not directly linked from the website. This check looks for common sensitive resources like password files, configuration files, log files, include files, statistics data, database dumps. Eac...
Home Owners Collection Management System 安全漏洞
Home Owners Collection Management System is a homeowner collection management system. A remote code execution vulnerability exists in Home Owners Collection Management System, which originates from a parameter cover via SystemSettings.php. The remote code execution RCE vulnerability is caused by ...
TOTOLINK T6 操作系统命令注入漏洞
TOTOLink T6 is a wireless dual-band router from TotoLink, China.TOTOLink T6 V5.9c.4085B20190428 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...
PT-2022-11464
Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize user...
Netgear NETGEAR 授权问题漏洞
Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that stems from the fact that some NETGEAR devices are affected by authentication...
ROS-2-1575
2.1575 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...
The vulnerability of the Azure RTOS operating system, which arises due to insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of the Azure RTOS exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to increase their privileges...
PT-2021-5271 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system. It allows a remote attacker to cause a denial of service. Recommendations: At the moment, there is no...