87 matches found
CVE-2026-3042
creationtimestamp| type| source ---|---|--- 2026-02-24 22:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfnacwrosh2m...
CVE-2026-3042 itsourcecode Event Management System index.php sql injection
A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public a...
RHSA-2026:3042 Red Hat Security Advisory: openssl security update
Bulletin has no description...
EUVD-2025-3042
Malicious code in bioql PyPI...
CVE-2023-3042
creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18189...
CVE-2025-3042
A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack can be initiated remotely. The exploit...
CVE-2025-3042
A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack can be initiated remotely. The exploit...
CVE-2025-3042
creationtimestamp| type| source ---|---|--- 2025-04-01 00:31:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9807 2025-04-01 05:15:42+00:00| seen| https://t.me/cvedetector/21700...
CVE-2024-3042
creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:26+00:00| seen| Telegram/6jYa0J25R3p0EO0j3tE30L9fuDuAiHYwbTguVIzgFNKQnWQ...
CVE-2024-3042
A vulnerability was found in SourceCodester Simple Subscription Website 1.0 and classified as critical. This issue affects some unknown processing of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-3042
A vulnerability was found in SourceCodester Simple Subscription Website 1.0 and classified as critical. This issue affects some unknown processing of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-3042
The CVE-2024-3042 entry applies to SourceCodester Simple Subscription Website 1.0. It documents an SQL injection in the file manage_user.php via the id parameter, caused by improper handling of the input. The vulnerability can be exploited remotely, and public disclosures exist. Remediation/worka...
CVE-2024-3042 SourceCodester Simple Subscription Website manage_user.php sql injection
A vulnerability was found in SourceCodester Simple Subscription Website 1.0 and classified as critical. This issue affects some unknown processing of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-3042 SourceCodester Simple Subscription Website manage_user.php sql injection
A vulnerability was found in SourceCodester Simple Subscription Website 1.0 and classified as critical. This issue affects some unknown processing of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2023-3042
In dotCMS, a flaw in the NormalizationFilter permits double slashes (//) in URLs to bypass certain checks. This affects versions prior to 23.06 (and affected LTS lines 22.03.7 and 23.01.4+). The root cause is an oversight in the default invalid URL character list. Mitigations documented in the co...
CVE-2023-3042 CNA SHORTNAME: dotCMSORG UUID: 5b9d93f2-25c7-46b4-ab60-d201718c9dd8
In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes // from URLs, potentially enabling bypasses for XSS and access controls. An example affected URL is https://demo.dotcms.com//html/portlet/ext/files/edittextinc.jsp , which should return a 404 response b...
Oracle Linux 8 : emacs (ELSA-2023-3042)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3042 advisory. 1:26.1-9 - Fix MH-E mail composition with GNU Mailutils 1991156 1:26.1-8 - Fix ctags local command execute vulnerability 2149386 Tenable has extracted the...
CentOS 8 : emacs (CESA-2023:3042)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:3042 advisory. - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the syste...
RHEL 8 : emacs (RHSA-2023:3042)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3042 advisory. GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the...
SUSE CVE-2015-3042
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0347,...