A vulnerability, which was classified as problematic, was found in Qt. This affects an unknown part of the component QAbstractOAuth. The manipulation of the argument guessable leads to same seed in pseudo-random number generator.
This vulnerability is…
A vulnerability, which was classified as critical, has been found in Kiteworks Totemomail up to 8.2.x. Affected by this issue is the function displayLoginChunkedImages/storeLoginChunkedImages of the file /responsiveUI/EnvelopeOpenServlet. The manipulat…
A vulnerability classified as critical was found in NixOS Nix up to 2.22.1. Affected by this vulnerability is an unknown functionality of the component Hash Cache Handler. The manipulation leads to code injection.
This vulnerability is known as CVE-20…
A vulnerability classified as problematic has been found in aio-libs aiosmtpd up to 1.4.5. Affected is an unknown function of the file smtpd.py of the component STARTTLS Handler. The manipulation leads to acceptance of extraneous untrusted data with tr…
I would like to know if there is a way to run an app to exhaustion in terms of all possible outcomes that it can provide.
What do I mean by that:
Let’s assume that someone has an (Apache) HTTP Server. What I am trying to do is to create pr…
I’ve been trying all day to nest created iframes and access their contents, but security restrictions dont let me. Is there a way? I shared my code and everything i tried so far in a codepen. https://codepen.io/serapath/pen/qBGbpMG?editors…
So a while ago I was talking to a guy who was a high-up security officer for a big bank, and he told me something interesting. He told me (and this isn’t private information or anything,) that after about five incorrect guesses of the pas…
First, a couple of useful oneliners 😉 wget “https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh” -O lse.sh;chmod 700 lse.sh curl “https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/ls…
htmlLawed 1.2.5 – Remote Code Execution (RCE)
Rocket LMS 1.9 – Persistent Cross Site Scripting (XSS)
