9071 matches found
CVE-2024-7748
A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely...
CVE-2024-7749
CVE-2024-7749 affects SourceCodester Accounts Manager App 1.0. The vulnerable component is the file /endpoint/add-account.php, where manipulating the account_name argument enables cross-site scripting. The issue can be exploited remotely and has public exploits disclosed. Multiple connected sourc...
CVE-2024-7749 SourceCodester Accounts Manager App add-account.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument accountname leads to cross site scripting. It is possible to launch the attack...
CVE-2024-7749 SourceCodester Accounts Manager App add-account.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument accountname leads to cross site scripting. It is possible to launch the attack...
CVE-2024-7748 SourceCodester Accounts Manager App delete-account.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely...
CVE-2024-7748 SourceCodester Accounts Manager App delete-account.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely...
CVE-2024-7748
SourceCodester Accounts Manager App 1.0 contains a SQL injection in the /endpoint/delete-account.php endpoint via the account parameter. The vulnerability allows remote exploitation and can impact confidentiality, integrity, and availability as described in multiple sources. The root cause is uns...
Hackers Leak 1.4 Billion Tencent User Accounts Online
Massive data leak exposes 1.4 billion Tencent user accounts. Leaked data includes emails, phone numbers, and QQ IDs…...
Rockwell Automation DataMosaix Private Cloud
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : DataMosaix Private Cloud Vulnerability : Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...
CVE-2024-41733
In SAP Commerce, valid user accounts can be identified during the customer registration and login processes. This allows a potential attacker to learn if a given e-mail is used for an account, but does not grant access to any customer data beyond this knowledge. The attacker must already know the...
CVE-2024-41733
Concrete details from connected sources confirm a candidate vulnerability in SAP Commerce: an information-disclosure issue that allows an attacker to determine whether a given email is associated with a valid user account during registration or login. The impact is confined to confidentiality (lo...
CVE-2024-41733 Information Disclosure Vulnerability in SAP Commerce
In SAP Commerce, valid user accounts can be identified during the customer registration and login processes. This allows a potential attacker to learn if a given e-mail is used for an account, but does not grant access to any customer data beyond this knowledge. The attacker must already know the...
SourceCodester Accounts Manager App 跨站脚本漏洞
SourceCodester Accounts Manager App is a web-based application from SourceCodester, Inc. It is designed to efficiently and securely manage online accounts. A cross-site scripting vulnerability exists in SourceCodester Accounts Manager App version 1.0, which stems from the parameter accountname in...
SourceCodester Accounts Manager App SQL注入漏洞
SourceCodester Accounts Manager App is a web-based application from SourceCodester, Inc. It is designed to manage online accounts efficiently and securely. A SQL injection vulnerability exists in SourceCodester Accounts Manager App version 1.0, which stems from the parameter account in the file...
PT-2024-38556 · Sourcecodester · Sourcecodester Accounts Manager App
Name of the Vulnerable Software and Affected Versions: SourceCodester Accounts Manager App version 1.0 Description: A critical issue has been found in the processing of the file "/endpoint/delete-account.php". The manipulation of the account argument leads to SQL injection. The attack may be...
PT-2024-38557 · Sourcecodester · Sourcecodester Accounts Manager App
Name of the Vulnerable Software and Affected Versions: SourceCodester Accounts Manager App version 1.0 Description: A problematic issue was found in the SourceCodester Accounts Manager App, affecting an unknown function of the file /endpoint/add-account.php. The manipulation of the account name...
Researchers Uncover Vulnerabilities in Solarman and Deye Solar Systems
Cybersecurity researchers have identified a number of security shortcomings in photovoltaic system management platforms operated by Chinese companies Solarman and Deye that could enable malicious actors to cause disruption and power blackouts. "If exploited, these vulnerabilities could allow an...
PT-2024-28867 · Unknown · Kashipara Online Exam System
Name of the Vulnerable Software and Affected Versions: Kashipara Online Exam System version 1.0 Description: A Broken Access Control issue was found in "admin/update.php" and "admin/dashboard.php", allowing remote unauthenticated attackers to view the administrator dashboard and delete valid user...
CVE-2024-40480
CVE-2024-40480 affects Kashipara Online Exam System v1.0. The vulnerability is a Broken Access Control in /admin/update.php and /admin/dashboard.php that allows remote unauthenticated attackers to view the admin dashboard and delete valid user accounts via direct URL access. The issue is confirme...
