CVE-2023-3018 SourceCodester Lost and Found Information System access control

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/?page=user/list. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit ha...

CVE-2023-3018

CVE-2023-3018 pertains to the SourceCodester Lost and Found Information System 1.0. The vulnerability affects the endpoint /admin/?page=user/list, where improper access controls allow remote manipulation, enabling privilege escalation to access admin functionalities. Multiple connected sources co...

Oracle Linux 8 : libarchive (ELSA-2023-3018)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3018 advisory. 3.3.3-5 - Fix for CVE-2022-36227 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

CentOS 8 : libarchive (CESA-2023:3018)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:3018 advisory. - In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails,...

SUSE CVE-2019-3018

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of...

CVE-2022-3018

creationtimestamp| type| source ---|---|--- 2022-10-28 18:34:27+00:00| seen| https://t.me/cibsecurity/52210 2025-05-07 15:22:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15331...

CVE-2022-3018

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs...

CVE-2022-3018

CVE-2022-3018 is an information-disclosure vulnerability in GitLab CE/EE that allows a project maintainer to access the DataDog integration API key from webhook logs. Affected versions are: all 9.3 up to, but not including, 15.2.5; all 15.3 up to, but not including, 15.3.4; and all 15.4 up to, bu...

GitLab 9.3 < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 (CVE-2022-3018)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before...

FreeBSD : Gitlab -- Multiple vulnerabilities (04422df1-40d8-11ed-9be7-454b1dd82c64)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 04422df1-40d8-11ed-9be7-454b1dd82c64 advisory. - Gitlab reports: Denial of Service via cloning an issue Arbitrary PUT request as victim user...

SUSE: Security Advisory (SUSE-SU-2018:3018-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3018

creationtimestamp| type| source ---|---|--- 2021-06-01 02:57:31+00:00| seen| https://t.me/pwnwikizhchannel/571 2025-10-15 13:35:13+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-3018.yaml 2025-10-16 21:02:30+00:00| seen|...

Ipeak Infosystems IbexwebCMS SQL Injection (CVE-2021-3018)

An SQL injection vulnerability exists in Ipeak infosystems ibexwebCMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CentOS 8 : mysql:8.0 (CESA-2020:3732)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3732 advisory. - mysql: Information Schema unspecified vulnerability CPU Oct 2019 CVE-2019-2911 - mysql: Server: Security: Encryption unspecified vulnerability CPU Oc...

IPeakCMS 3.5 SQL Injection

Exploit Title: IPeakCMS 3.5 - Boolean-based blind SQLi Date: 07.12.2020 Exploit Author: MoeAlbarbari Vendor Homepage: https://ipeak.ch/ Software Link: N/A Version: 3.5 Tested on: BackBox Linux CVE : CVE-2021-3018 Check the CMS version :goto www.site.com/cms/ and you will notice that in the login...

IPeakCMS 3.5 - Boolean-based blind SQLi

Exploit Title: IPeakCMS 3.5 - Boolean-based blind SQLi Date: 07.12.2020 Exploit Author: MoeAlbarbari Vendor Homepage: https://ipeak.ch/ Software Link: N/A Version: 3.5 Tested on: BackBox Linux CVE : CVE-2021-3018 Check the CMS version :goto www.site.com/cms/ and you will notice that in the login...

CVE-2021-3018

ipeak Infosystems ibexwebCMS aka IPeakCMS 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page...

CVE-2021-3018

CVE-2021-3018 – IPeakCMS 3.5 : An unauthenticated, Boolean-based SQL injection exists in the /cms/print.php endpoint via the id parameter. Exploitation can enable arbitrary SQL execution without authentication, potentially leading to data disclosure or compromise of the database. Affected product...

CVE-2021-3018

ipeak Infosystems ibexwebCMS aka IPeakCMS 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page...

Important: Red Hat Security Advisory: mysql:8.0 security update

An update for the mysql:8.0 module is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...