SourceCodester Modern Loan Management System 跨站脚本漏洞

SourceCodester Modern Loan Management System is an open source modern loan management system from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Modern Loan Management System version 1.0, which stems from an incorrect manipulation of the parameter amount that can le...

PT-2024-39423 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Modern Loan Management System version 1.0 Description: A problematic issue affects the processing of the file update loan record.php, where the manipulation of the amount argument leads to cross-site scripting. The attack can b...

CVE-2023-6841 Keycloak: amount of attributes per object is not limited and it may lead to dos

A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resource exhaustion when the application send back rows with long attribute values...

Simple Invoice Generator System SQL注入漏洞

Simple Invoice Generator System is a simple invoice generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Invoice Generator System version 1.0, which originates in the invoicecode/customer/cashier/totalamount/discountpercentage of the /saveinvoice.ph...

Malicious code in sap-amount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8956ea6aded6c1b89426a6ac908c07ef50a95ae0dd32d0a8c4d5be953fe93583 The OpenSSF Package Analysis project identified 'sap-amount' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7545 Malicious code in sap-amount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8956ea6aded6c1b89426a6ac908c07ef50a95ae0dd32d0a8c4d5be953fe93583 The OpenSSF Package Analysis project identified 'sap-amount' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in libx-amount (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2609 Malicious code in libx-amount (npm)

--- -= Per source details. Do not edit below this line.=-...

Exploit for SQL Injection in Vanquish Woocommerce_Customers_Manager

CVE-2024-0399 - WooCommerce Customers Manager 29.4 - Post-Auth...

CVE-2024-26905

CVE-2024-26905 is rejected by the CNA and not a valid vulnerability entry.

Church Management System SQL注入漏洞

Church Management System is a church management system. A SQL injection vulnerability exists in version 1.0 of the Church Management System, which originates from an SQL injection vulnerability in the amount parameter of the /admin/addgiving.php file...

CVE-2024-3539: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Church Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addgiving.php. The manipulation of the argument amount leads to sql injection. The attack can be launched remotely...

CVE-2024-25867

A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters in the addtype.php component...

PT-2024-21173 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A SQL Injection issue allows a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters in the "add type.php" component. This...

CodeAstro Membership Management System SQL Injection Vulnerability

CodeAstro Membership Management System is a membership management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Membership Management System v.1.0 that could allow a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters...

CVE-2024-1924

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /getmembershipamount.php. The manipulation of the argument membershipTypeId leads to sql injection. It is possible to initiate the attack remotely...

PT-2024-18426 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue has been found in the CodeAstro Membership Management System. The problem affects the /get membership amount.php file, where the manipulation of the...

Miscalculation of OLAS Amount Due to Inaccurate LP Token Price in Specific Bonding Mechanism Scenarios

Lines of code Vulnerability details Impact Incorrect valuation of the LP Token price can result in either an excess issuance of OLAS Tokens, causing a loss to the protocol, or a lower issuance of OLAS Tokens, leading to losses for the user. Proof of Concept The prototype of the create function in...

minaliC 2.0.0 Denial Of Service

!/usr/bin/perl use Socket; Exploit Title: minaliC 2.0.0 - Denial of Service DoS Discovery by: Fernando Mengali Discovery Date: 03 january 2024 Vendor Homepage: http://minalic.sourceforge.net/ Download to demo: https://drive.google.com/file/d/1WoDbps6up2s5Xa40YXDSABRU9J17yRQd/view?usp=sharing...

Liquidator has no incentives to execute a favorable trade to the borrower

Lines of code Vulnerability details Summary Swaps involved in liquidations may negatively impact the owner of the lien, since there is no incentive to execute a favorable trade as long as the received amount is enough to recover the liquidity. Impact When an existing position is closed, the...