CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: go-licenses, bom, gitness, gitsign, nuclei, src-fingerprint, scorecard, goreleaser, pulumi-kubernetes-operator...

CVE-2023-51949

Verydows v2.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /protected/controller/backend/rolecontroller...

Debian: Security Advisory (DLA-3702-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-14335 · Verydows · Verydows

Name of the Vulnerable Software and Affected Versions: Verydows version 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /protected/controller/backend/role controller component. This allows for unauthorized actions to be performed on behalf of a user without their...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: go-licenses, bom, gitness, gitsign, nuclei, src-fingerprint, scorecard, goreleaser, pulumi-kubernetes-operator...

Free Decryptor Released for Black Basta and Babuk's Tortilla Ransomware Victims

A decryptor for the Tortilla variant of the Babuk ransomware has been released by Cisco Talos, allowing victims targeted by the malware to regain access to their files. The cybersecurity firm said the threat intelligence it shared with Dutch law enforcement authorities made it possible to arrest...

KLA62829 ACE vulnerability in Microsoft Mariner

A array-bounds overflow vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2022-35737 Exploitation Public exploits exist for this vulnerability. Related products CBL-Mariner-2.0 CVE list CVE-2022-35737...

CVE-2023-7211

A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an...

CVE-2023-7211

CVE-2023-7211 affects Uniway Router 2.0, specifically the Administrative Web Interface. The vulnerability arises from unknown code in that component, causing authentication to rely on the client’s IP address. The issue enables remote exploitation with high impact across confidentiality, integrity...

PT-2024-15232 · Unknown · Uniway Router

Name of the Vulnerable Software and Affected Versions: Uniway Router versions up to 2.0 Description: A critical issue affects some unknown functionality of the file /boaform/device reset.cgi of the component Device Reset Handler, leading to denial of service. The attack may be launched remotely...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2024-1029)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Easy File Sharing FTP Server 2.0 Denial Of Service

!/usr/bin/perl use Net::FTP; Exploit Title: Easy File Sharing FTP Server 2.0 - Denial of Service DoS Discovery by: Fernando Mengali Discovery Date: 04 january 2024 Download to demo: https://drive.google.com/drive/folders/1XISgBk4Zql8NzkWsrzAPOUEqbjJP4hZQ?usp=sharing Notification vendor: No report...

SUSE: Security Advisory (SUSE-SU-2024:0004-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-817ecc703f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-7130

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

CVE-2023-7130

The CVE-2023-7130 entry concerns code-projects College Notes Gallery 2.0 where an SQL injection affects an unknown functionality in login.php via the manipulated user parameter. Multiple connected sources confirm a SQLi vulnerability with public exploit availability and classify it as critical. T...

College Notes Gallery SQL Injection Vulnerability

College Notes Gallery is a personal blog. code-projects College Notes Gallery version 2.0 suffers from a SQL injection vulnerability that stems from the parameter user in the file login.php that causes SQL injection...

CVE-2023-7132

A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the file /userregistration/ of the component User Registration. The manipulation of the argument userName/firstName/lastName/userEmail with th...

Cross site scripting

A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the file /userregistration/ of the component User Registration. The manipulation of the argument userName/firstName/lastName/userEmail with th...

CVE-2023-7132

CVE-2023-7132 affects code-projects Intern Membership Management System 2.0, specifically the User Registration component’s /user_registration/ path. The issue is a cross-site scripting vulnerability caused by reflecting manipulated values for userName, firstName, lastName, or userEmail, with pay...