Malicious code in f-amnotacat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 141c802dcb10a0a2a8bcc332e52d93c8f9da888b8ca3201498dae8f1268829f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2952 Malicious code in f-amnotacat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 141c802dcb10a0a2a8bcc332e52d93c8f9da888b8ca3201498dae8f1268829f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31911: Improper Neutralization of Special Elements used in an SQL Command

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

CVE-2022-31913: Improper Neutralization of Input During Web Page Generation

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

CVE-2022-31912: Improper Neutralization of Special Elements used in an SQL Command

Online Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f=deleteteam...

PT-2022-21233

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/ffos/classes/Master.php?f=delete menu" API endpoint. This allows for potential unauthorized access and manipulation of database conten...

PT-2022-21259

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/classes/Master.php?f=delete inquiry" API endpoint. This allows for potential manipulation of database queries. No information is provided about the...

PT-2022-21253

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete room type API endpoint. This allows for potential unauthorized access and...

CVE-2022-32359: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deletecategory...

PT-2022-21255

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete patient admission API endpoint. This allows for potential unauthorized access and...

PT-2022-21260

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/psrs/classes/Master.php?f=delete category" API endpoint. This allows for potential manipulation of database queries. No informati...

PT-2022-21250

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete room API endpoint. This allows for potential unauthorized access and manipulation ...

PT-2022-21251

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete doctor endpoint. This allows for potential unauthorized access and manipulation of...

Mitsubishi Electric MELSEC iQ-F Series Improper Input Validation (CVE-2022-25162)

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/zx=32,64,80, y=T,R, z=ES,DS,ESS,DSS with serial number 17X or later and versions prior to 1.270, Mitsubishi Electric Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/zx=32,64,80, y=T,R, z=ES,DS,ESS,DSS with...

Mitsubishi Electric MELSEC iQ-F Series Improper Input Validation (CVE-2022-25161)

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/zx=32,64,80, y=T,R, z=ES,DS,ESS,DSS with serial number 17X or later and versions prior to 1.270, Mitsubishi Electric Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/zx=32,64,80, y=T,R, z=ES,DS,ESS,DSS with...

PT-2022-21022

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete product. This allows...

PT-2022-21025

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the /bcms/classes/Master.php?f=delete service API endpoint. This allows for potential manipulation of database queries. No information is provided...

PT-2022-21023

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete court. This allows for potential manipulation of database...

PT-2022-21004

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue allows deletion of any file via the /simple chat bot/classes/Master.php API endpoint with the f parameter set to delete img. Recommendations For ChatBot App with Suggestion version...

PT-2022-20995

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL injection via the /rdms/classes/Master.php?f=delete incident endpoint. This allows for potential manipulation of database queries. No information is provided abou...