Loginsoft

**Vulnerability Description** :- The Ponzu CMS is vulnerable to TOCTTOU attack. When an admin user deletes another admin user in the web application who is logged in at another system’s...

**Vulnerability Description** :- The Ponzu CMS is vulnerable to CSRF. Application allows an attacker to create an admin user and delete an user in ponzu CMS. An attacker can exploit...

Improper Session Management - Session Fixation

3

**Describe Your Environment** - ZoneMinder v1.33.1 - Installed from - ppa:iconnor/zoneminder-master **Describe the bug** Before any response being rendered on the web page, a cookie is being set as part...

Log Injection

4

**Describe Your Environment** - ZoneMinder v1.33.1 - Installed from - ppa:iconnor/zoneminder-master **Describe the bug** This attack targets the log files of the target host. The attacker injects, manipulates or forges...

Null pointer dereference in function calculate_beam().

3

What is the vulnerability? Null pointer Dereference is discovered in abcm2ps (8.14.6-master). The same can be triggered by sending a crafted abc file to the abcm2ps binary. It allows an...

What is the vulnerability? Null pointer Dereference is discovered in abcm2ps (8.14.6-master). The same can be triggered by sending a crafted abc file to the abcm2ps binary. It allows an...

What is the vulnerability? Null pointer Dereference is discovered in abcm2ps (8.14.6-master). The same can be triggered by sending a crafted abc file to the abcm2ps binary. It allows an...

What is the vulnerability? Null pointer Dereference is discovered in abcm2ps (8.14.6-master). The same can be triggered by sending a crafted abc file to the abcm2ps binary. It allows an...