64 matches found
CVE-2022-3013
creationtimestamp| type| source ---|---|--- 2022-08-27 12:31:01+00:00| seen| https://t.me/cibsecurity/48933 2025-04-15 13:54:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11807...
CVE-2022-3013
A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated...
CVE-2022-3013 SourceCodester Simple Task Managing System loginVaLidation.php sql injection
A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated...
CVE-2022-3013
CVE-2022-3013 affects SourceCodester Simple Task Managing System. Affected component: unknown area of /loginVaLidation.php. Root cause: manipulation of the parameter login leads to SQL injection , with remote exploitable access. Multiple connected reports confirm the issue and describe exploitati...
CVE-2021-3013
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag...
CVE-2021-3013
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag...
CVE-2021-3013
CVE-2021-3013 concerns ripgrep before version 13 on Windows, where the -z/--search-zip or --pre flags allow triggering execution of arbitrary programs from the current working directory. The connected data confirms this as a Windows-specific command-injection-style issue affecting ripgrep’s ZIP-s...
CVE-2018-3013
CVE-2018-3013 details (connected sources) : The vulnerability affects Oracle Hospitality OPERA 5 Property Services, specifically the Report Server Config subcomponent of OPERA 5 Property Services, in Oracle Hospitality Applications. Affected version: 5.5.x. The vulnerability allows a low-privileg...
Security Bulletin: Cúram is vulnerable to cross site scripting attack (CVE-2014-3013)
Summary Cúram is vulnerable to cross site scripting attack. Vulnerability Details CVEID: CVE-2014-3013 DESCRIPTION: Cúram is vulnerable to cross site scripting attack caused by improper validation and sanitization of tags in custom JSPs or custom renderers that add text nodes to content that will...
Security Bulletin: IBM MQ Channel data conversion denial of service (CVE-2016-3013)
Summary When an Message Channel Agent removes a large message from a queue and applies data conversion to the message, the result could overflow the allocated buffer and cause the channel to end abnormally. Vulnerability Details CVEID: CVE-2016-3013 DESCRIPTION: IBM MQ could allow an authenticate...
CVE-2017-3013
CVE-2017-3013 affects Adobe Acrobat Reader and Acrobat on Windows/macOS with insecure library loading (DLL hijacking) in a DLL related to remote logging. Affected versions include Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier. Connected sources also gr...
CVE-2017-3013
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in a DLL related to remote logging...
CVE-2016-3013
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference : 1998661...
Microsoft Windows GDI+ GIF Parsing Buffer Overflow (MS08-052) - Ver2 (CVE-2008-3013)
Graphics Interchange Format GIF images are 8-bit files that support transparency, compression, interlacing, and multiple-image pictures animated GIFs. A remote code execution vulnerability has been discovered in the way GDI+ parses GIF images. The vulnerability is due to a buffer overrun when GDI...
CVE-2015-3013
The CVE-2015-3013 entry applies to ownCloud Server releases before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5, where authenticated remote users could bypass the file blacklist and upload arbitrary files by using UTF-8 encoded paths (demonstrated with .htaccess). Exploitation requires authenti...
[SECURITY] [DSA 3244-1] owncloud security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3244-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 02, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3244-1] owncloud security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3244-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 02, 2015 http://www.debian.org/security/faq -...
Bypass of file blacklist - ownCloud
A blacklist bypass vulnerability including UTF-8 encoding in file paths in the mentioned ownCloud versions, allows authenticated remote attackers to bypass the file blacklist and upload files such as the .htaccess files. An attacker could leverage this bypass by uploading a .htaccess and execute...
Bypass of file blacklist on Microsoft Windows Platform - ownCloud
A blacklist bypass vulnerability including UTF-8 encoding in file paths in the mentioned ownCloud Server versions, when running on a Microsoft Windows Platform, allows authenticated remote attackers to bypass the file blacklist and upload files such as the .htaccess files. An attacker could...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3013)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3013 advisory. - kvm: fix excessive pages un-pinning in kvmiommumap error path. Quentin Casasnovas Orabug: 20687313 CVE-2014-3601 CVE-2014-8369 CVE-2014-3601 -...