CVE-2023-2046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection. This issue affects Vehicle Tracking System: before 8...

PT-2023-25713 · Unknown +1 · Uptime Kuma +1

Name of the Vulnerable Software and Affected Versions: Uptime Kuma versions prior to 1.22.1 Description: The issue allows an authenticated attacker to install a maliciously crafted plugin, potentially leading to remote code execution. Uptime Kuma permits authenticated users to install plugins fro...

GLPI SQL注入漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

1Panel 命令注入漏洞

1Panel is an open source Linux server operation and management panel for the Chinese 1Panel community. A command injection vulnerability exists in versions prior to 1.3.6 of 1Panel, which originates from allowing an attacker to build a malicious payload to achieve command injection when entering ...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. A security vulnerability exists in DataEase versions prior to 1.18.8, which stems from the possibility th...

CVE-2023-2719

The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the id parameter for an Agent in the REST API before using it in an SQL statement, leading to an SQL Injection exploitable by users with a role as low as Subscriber...

CVE-2023-3048

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15...

CVE-2023-3047

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMT Lockcell allows SQL Injection. This issue affects Lockcell: before 15...

CVE-2023-3049

Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection. This issue affects Lockcell: before 15...

TMT Lockcell 代码问题漏洞

TMT Lockcell is an application from TMT Corporation. A code issue vulnerability exists in versions prior to TMT Lockcell 15, which stems from the fact that there is no limit to the number of uploads of a dangerous type of file, which can be exploited by an attacker to perform a command injection...

DEBIAN-CVE-2023-26132

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

CVE-2023-3142

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-3074

Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...

CVE-2023-3071

Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...

PT-2023-22943 · Unknown · Tsolucio/Corebos

Name of the Vulnerable Software and Affected Versions: tsolucio/corebos versions prior to 8 Description: The issue is related to Cross-site Scripting XSS - Stored. This is a type of security vulnerability that occurs when an application stores user input data without proper validation, allowing a...

PT-2023-22888 · Tsolucio · Tsolucio/Corebos

Name of the Vulnerable Software and Affected Versions: tsolucio/corebos versions prior to 8 Description: The issue concerns an unverified password change in the GitHub repository tsolucio/corebos. Recommendations: For versions prior to 8, update to version 8 or later to resolve the issue...

07FLY-CRM 跨站脚本漏洞

07FLY-CRM is a CRM management system from China Zero Takeoff 07FLY. A cross-site scripting vulnerability exists in versions prior to 07FLY-CRM 1.2.0, which stems from unknown code in the User Profile Handler that results in cross-site scripting...

SUSE CVE-2023-2933

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

Contec CONPROSYS HMI System 安全漏洞

Contec CONPROSYS HMI System is an HTML5 technology-based HMI Human Machine Interface/SCADA Supervisory Control and Data Acquisition software product from Contec Japan. A security vulnerability exists in Contec CONPROSYS HMI System versions prior to 3.5.3, which stems from an incorrect assignment ...

CVE-2023-2750

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection.This issue affects E-municipality: before 6.05...