A vulnerability, which was classified as problematic, was found in stacklok Minder up to 0.0.50. Affected is an unknown function of the file orgs/$owner/attestations/$checksumref. The manipulation leads to allocation of resources.
This vulnerability i…
A vulnerability, which was classified as problematic, has been found in advplyr audiobookshelf up to 2.9.0. This issue affects some unknown processing of the component File Handler. The manipulation leads to cross site scripting.
The identification of…
A vulnerability classified as problematic was found in dbt-labs dbt-core up to 1.6.14/1.7.14/1.8.0. This vulnerability affects unknown code of the component Network Interface Handler. The manipulation leads to binding to an unrestricted ip address.
Th…
A vulnerability classified as critical has been found in rack-contrib up to 2.4.x. This affects the function profiler_runs. The manipulation leads to allocation of resources.
This vulnerability is uniquely identified as CVE-2024-35231. It is possible …
A vulnerability was found in FOG up to 1.5.10. It has been rated as critical. Affected by this issue is the function configureNFS in the library lib/common/functions.sh of the component NFS Share Mount Handler. The manipulation leads to Local Privilege…
A vulnerability was found in FOG up to 1.5.10. It has been rated as critical. Affected by this issue is the function configureNFS in the library lib/common/functions.sh of the component NFS Share Mount Handler. The manipulation leads to Local Privilege…
A vulnerability was found in Grup Arge Energy and Control Systems Smartpower up to 24.05.27. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection.
This vulnerability is k…
A vulnerability was found in Grup Arge Energy and Control Systems Smartpower up to 24.05.27. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection.
This vulnerability is k…
I’m trying to exploit the code posted by ir0nstone at this link https://ir0nstone.gitbook.io/notes/types/stack/shellcode.
I followed any of the steps listed in the tutorial, ASLR is not enabled on my machine, but when I launch the exploit …
Does the CORS asteriks / wildcard (*) include both encrypted (https) and unencrypted origins (http)? And is the null origin (i.e., when a local file is doing a xmlhttprequest, or within an iframe with sandbox attribute) regarded as http?
…
