Baza CVE

Wykonanie zdalnego kodu w Craft CMS umożliwia atakującym wykorzystanie złośliwych klas przez edytorów treści.

Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client (`mysql`) without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as `\!` as local shell commands. An authenticated…

Błąd w Snipe-IT umożliwia atakującym zdalne wywołanie odmowy usługi przez nadmiarowe dane.

Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavior attachments and event handlers. Attackers can post field-layout tab elements as JSON strings to bypass cleanse validation, then trigger…

Wykorzystanie podatności CSRF w AVideo pozwala na zmianę sald portfeli użytkowników.

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in the SocialMediaPublisher plugin's add.json.php endpoint that allows authenticated users to modify other users' OAuth token records. Attackers can supply arbitrary row IDs to overwrite another…

AVideo through 29.0 contains an information disclosure vulnerability in restreamsActive.json.php that allows authenticated streamers to enumerate source stream keys and identities of all other streamers' active restreams. The endpoint fails to filter results by user ownership, exposing sensitive…

Wykrycie ujawnienia informacji w AVideo pozwala nieautoryzowanym atakującym na dostęp do kluczy strumieniowych.

AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-stream keys and private EPG schedules to unauthenticated users. Attackers can request the endpoint with sequential user or playlist IDs to retrieve sensitive credentials, server…

AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named 'key' with value 'value' overrides the $_REQUEST['key'] parameter in saveLive.php and related endpoints. Attackers can publish to any user's RTMP stream without authentication by using the…

Obejście uwierzytelnienia w AVideo pozwala na ominięcie dwuetapowej weryfikacji na nowych urządzeniach.

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge() that uses loose comparison (==) instead of strict comparison (===) against unset session values. Attackers with only a password can submit an empty request to…

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in deleteHistory.json.php and finishAll.json.php that allows unauthenticated attackers to mutate live history by making GET requests without CSRF token validation. Attackers can…

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of live_restreams_id in resendRestreamer.json.php, allowing authenticated users with canStream to access other users' restream destinations. Attackers can broadcast their live stream to…

Błąd w sterownikach Snowflake umożliwia atakującemu przejęcie tokenów uwierzytelniających.

An XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload.

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below.

Nieprawidłowa walidacja danych wejściowych w module PayTR Virtual Pos iFrame API umożliwia manipulację danymi.

Luka w PayTR Virtual Pos iFrame API WHMCS Module umożliwia inżynierię wsteczną.

Wykorzystanie zwolnionej pamięci w sterownikach GPU Arm pozwala na nieautoryzowany dostęp do danych.

Warunek wyścigu w sterownikach GPU Arm umożliwia lokalnemu użytkownikowi wywołanie odmowy usługi lub ujawnienie danych.

A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated administrator into visiting a specially crafted web page.

An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access.

Luka Use After Free w sterownikach GPU Arm umożliwia lokalnemu użytkownikowi dostęp do zwolnionej pamięci.

Luka Use After Free w sterownikach GPU Arm umożliwia lokalnemu użytkownikowi dostęp do zwolnionej pamięci.