89 matches found
CVE-2026-0730
creationtimestamp| type| source ---|---|--- 2026-01-09 01:14:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxczw5nub2q...
CVE-2026-0730
A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADDSTAFF/UPDATESTAFF of the file /staffleave/slms/slms/adminviews.py of the component SVG File Handler. Executing a manipulation of the argument profilepic can lead to cross site scripting...
CVE-2026-0730 PHPGurukul Staff Leave Management System SVG File adminviews.py UPDATE_STAFF cross site scripting
A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADDSTAFF/UPDATESTAFF of the file /staffleave/slms/slms/adminviews.py of the component SVG File Handler. Executing a manipulation of the argument profilepic can lead to cross site scripting...
EUVD-2011-2318
Malware in sbrugna...
CVE-2025-0730
A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usraccountset.cgi of the component HTTP GET Request Handler. The manipulation of the argument username/password leads to use of get request...
CVE-2024-0730
A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-0730
A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usraccountset.cgi of the component HTTP GET Request Handler. The manipulation of the argument username/password leads to use of get request...
CVE-2025-0730
creationtimestamp| type| source ---|---|--- 2025-01-27 17:01:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113901391029951579 2025-01-27 17:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgy3e5dy2t 2025-01-27 18:55:22+00:00| seen|...
CVE-2025-0730
CVE-2025-0730 affects TP-Link TL-SG108E (version 1.0.0 Build 20201208 Rel. 40304). The vulnerability is in an unknown function of the HTTP GET Request Handler for /usr_account_set.cgi, where manipulating the username/password parameters in a GET request can disclose sensitive query data and is po...
Qnap QTS Command Injection (CVE-2018-0730)
This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...
CVE-2018-0730
creationtimestamp| type| source ---|---|--- 2024-03-07 10:36:58+00:00| seen| https://t.me/ctinow/202273...
CVE-2024-0730
creationtimestamp| type| source ---|---|--- 2024-01-19 20:32:06+00:00| seen| https://t.me/ctinow/170385 2024-01-25 23:16:23+00:00| seen| https://t.me/ctinow/173857 2024-02-15 09:16:40+00:00| seen| https://t.me/ctinow/185356...
CVE-2024-0730
A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-0730
Mode C: CVE-2024-0730 affects Project Worlds Online Time Table Generator 1.0; vulnerable component is course_ajax.php where manipulation of the id parameter leads to SQL injection. The issue is exploitable remotely and has been publicly disclosed (VDB-251553). Remediation details in connected doc...
CVE-2024-0730 Project Worlds Online Time Table Generator course_ajax.php sql injection
A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-0730 Project Worlds Online Time Table Generator course_ajax.php sql injection
A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2023-0730
creationtimestamp| type| source ---|---|--- 2023-02-08 02:23:31+00:00| seen| https://t.me/cibsecurity/57729...
WordPress Wicked Folders Plugin <= 2.18.16 is vulnerable to Cross Site Request Forgery (CSRF)
Software Wicked Folders Type Plugin Vulnerable versions = 2.18.16 Fixed in 2.18.17 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-0730 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID a5e4047ba885 Credits Marco Wotschka...
[SECURITY] [DLA 3252-1] cacti security update
Debian LTS Advisory DLA-3252-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 31, 2022 https://wiki.debian.org/LTS Package : cacti Version : 1.2.2+ds1-2+deb10u5 CVE ID : CVE-2020-8813 CVE-2020-23226 CVE-2020-25706 CVE-2022-0730 CVE-2022-46169 Debian Bug :...
CVE-2022-0730
creationtimestamp| type| source ---|---|--- 2022-12-12 08:44:41+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus23/2022...