67 matches found
MiracleLinux 7 : wpa_supplicant-2.6-5.el7.1 (AXSA:2017-2342:03)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-2342:03 advisory. A new exploitation technique called key reinstallation attacks KRACK affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could...
WordPress افزونه پیامک ووکامرس فوق حرفه ای (جدید) payamito sms woocommerce plugin <= 1.3.5 - Unauthenticated Time-Based Blind SQL Injection vulnerability
Unauthenticated Time-Based Blind SQL Injection vulnerability discovered by luckybuddy in WordPress Plugin افزونه پیامک ووکامرس فوق حرفه ای جدید payamito sms woocommerce versions = 1.3.5...
CVE-2025-13077
The افزونه پیامک ووکامرس فوق حرفه ای جدید payamito sms woocommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'columns' parameter in all versions up to, and including, 1.3.5. This is due to insufficient escaping on the user supplied parameter and lack of sufficie...
CVE-2024-13077
A vulnerability, which was classified as problematic, was found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/add-property.php. The manipulation of the argument Land Subtype leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2018-13077
The mintToken function of a smart contract implementation for CTB, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
Linux Distros Unpatched Vulnerability : CVE-2017-13077
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the four-way handshake, allowing an attacker...
CVE-2024-13077
creationtimestamp| type| source ---|---|--- 2024-12-31 18:33:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113748869835847560 2024-12-31 19:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemr2bml5r25 2024-12-31 21:15:48+00:00| seen|...
CVE-2024-13077 PHPGurukul Land Record System add-property.php cross site scripting
A vulnerability, which was classified as problematic, was found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/add-property.php. The manipulation of the argument Land Subtype leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2019-13077
creationtimestamp| type| source ---|---|--- 2024-02-05 09:41:43+00:00| seen| https://t.me/ctinow/179082...
HP LaserJet Printers Multiple Vulnerabilities (HPSBPI03574)
The remote HP LaserJet printer is potentially affected by the following vulnerabilities: - Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoo...
BELL-CVE-2017-13077 CVE-2017-13077 does not affect BellSoft software
Bulletin has no description...
SUSE SLES12 Security Update : wpa_supplicant (SUSE-SU-2022:1853-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1853-1 advisory. - Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpasupplicant before 2.5 allow remote attackers to...
Mageia: Security Advisory (MGASA-2018-0323)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0379)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SourceCodester Online Covid Vaccination Scheduler System跨站脚本漏洞（CNVD-2022-13077）
SourceCodester Online Covid Vaccination Scheduler System is an application of SourceCodester, Inc. Sourcecodester Online Covid Vaccine Scheduler System is a cross-site scripting vulnerability that stems from the lack of escaping or filtering of user data in the software lid parameter, which could...
CVE-2020-13077
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
getupway.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178699 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Huawei EulerOS: Security Advisory for wpa_supplicant (EulerOS-SA-2019-1422)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for wpa_supplicant (EulerOS-SA-2017-1241)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...