CVE-2024-6439: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated...

CVE-2024-6440: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. It is possible to launch the...

PT-2024-28292 · Phpok · Phpok

Name of the Vulnerable Software and Affected Versions: phpok version 6.4.003 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It affects the ok f method located in the framework/api/upload control.php file. Recommendations: For phpok version 6.4.003, consider disabli...

CVE-2024-6419: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file /classes/Master.php?f=savemedicine. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-6418: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file /classes/Users.php?f=registeruser. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-23765

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes an unidentified service on port 7412 on the network. All the network services of the gateway become unresponsive after sending 85 requests to this port. The content and length of the frame does not matter. The...

CVE-2024-23766

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway or at least most of its modules. An attacker can use this feature to carry out a denial of...

PT-2024-20070 · Hms · Hms Anybus X-Gateway Ab7832-F

Name of the Vulnerable Software and Affected Versions: HMS Anybus X-Gateway AB7832-F version 3 Description: An issue was discovered that allows unauthenticated changes to a device's network configurations through the HICP protocol. Recommendations: For HMS Anybus X-Gateway AB7832-F version 3,...

CVE-2024-23765: Undefined Security Weakness

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes an unidentified service on port 7412 on the network. All the network services of the gateway become unresponsive after sending 85 requests to this port. The content and length of the frame does not matter. The...

CVE-2024-23766: Use of GET Request Method With Sensitive Query Strings

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway or at least most of its modules. An attacker can use this feature to carry out a denial of...

CVE-2024-23767: Improper Authentication

An issue was discovered on HMS Anybus X-Gateway AB7832-F firmware version 3. The HICP protocol allows unauthenticated changes to a device's network configurations...

CVE-2024-23766

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway or at least most of its modules. An attacker can use this feature to carry out a denial of...

CVE-2024-23765

The HMS Anybus X-Gateway AB7832-F 3 devices are vulnerable to a denial-of-service condition due to an unidentified service exposed on port 7412 . By sending 85 requests to this port—regardless of the frame content or length—an attacker can cause all network services on the gateway to become unres...

Malicious code in down_load_ebook_g_f_unger_western_bestseller_2503_by_g_f_unger_d0sdg (npm)

--- -= Per source details. Do not edit below this line.=-...

Exploit for Special Element Injection in Google Android

CVE 2024 0044 CVE-2024-0044, identified in the createSessionI...

CVE-2024-5893: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Cab Management System 1.0. This affects an unknown part of the file /cms/classes/Users.php?f=deleteclient. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-5897: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=logvisitor. The manipulation of the argument name leads to cross site...

CVE-2024-35358: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=viewcategory. Manipulating the argument id can result in SQL injection...

PT-2024-9022

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition between the AIO completion handler and AIO cancel in the Linux kernel's usb: gadget: f fs component. This occurs when the FFS application issue...

CVE-2024-35352: Improper Neutralization of Input During Web Page Generation

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.php?f=save. Manipulating the parameter middlename results in cross-site scripting...