931 matches found
MAL-2025-27877 Malicious code in nu-refactor-load-boolean-log (npm)
The package nu-refactor-load-boolean-log was found to contain malicious code...
MAL-2025-20781 Malicious code in fork-daemon-container-wind-boolean (npm)
The package fork-daemon-container-wind-boolean was found to contain malicious code...
MAL-2025-33158 Malicious code in short-root-error-encrypt-boolean (npm)
The package short-root-error-encrypt-boolean was found to contain malicious code...
MAL-2025-15964 Malicious code in boolean-theta-static-sudo-node (npm)
The package boolean-theta-static-sudo-node was found to contain malicious code...
MAL-2025-19635 Malicious code in emulate-boolean-info-enum-chi (npm)
The package emulate-boolean-info-enum-chi was found to contain malicious code...
MAL-2025-19086 Malicious code in easy-boolean-mock-proxy-stack (npm)
The package easy-boolean-mock-proxy-stack was found to contain malicious code...
CVE-2025-50341
A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...
CVE-2025-50341
A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...
š Invision Community 4.7.20 SQL Injection
Invision Community versions 4.7.20 and below have a vulnerability located within the /applications/calendar/modules/front/calendar/view.php script. Specifically, in the IPS\calendar\modules\front\calendar\view::search method: user input passed through the location request parameter is not properl...
Solady 代ē é®é¢ę¼ę“
Solady is an application by Vectorized Personal Developers. A code issue vulnerability exists in versions of Solady prior to 0.1.24, which stems from an initialization function that may fail silently if it does not return a bool...
A New Representation of Binary Sequences by Means of Boolean Functions
Boolean functions and binary sequences are main tools used in cryptography. In this work, we introduce a new bijection between the set of Boolean functions and the set of binary sequences with period a power of two. We establish a connection between them which allows us to study some properties o...
CVE-2025-4568 SQL Injection in 2ClickPortal
Improper neutralization of input provided by an unauthorized user into changesreferenceid parameter in URL allows for boolean-based Blind SQL Injection attacks...
CVE-2025-4568 SQL Injection in 2ClickPortal
Improper neutralization of input provided by an unauthorized user into changesreferenceid parameter in URL allows for boolean-based Blind SQL Injection attacks...
Trol InterMedia 2ClickPortal SQLę³Øå „ę¼ę“
Trol InterMedia 2ClickPortal is a web portal from Trol InterMedia, Inc. Trol InterMedia 2ClickPortal suffers from a SQL injection vulnerability that stems from improper neutralization of the changesreferenceid parameter input, which could lead to a blind Boolean-based SQL injection attack...
š Campcodes Online Hospital Management System 1.0 SQL Injection
Campcodes Online Hospital Management System version 1.0 suffers from a remote SQL injection vulnerability. Exploit Title: Campcodes Online Hospital Management System 1.0 - SQL Injection Google Dork: N/A Exploit Author: Carine Constantino Vendor Homepage: https://www.campcodes.com Software Link:...
CVE-2024-51482
ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...
CVE-2023-32308
anuko timetracker is an open source time tracking system. Boolean-based blind SQL injection vulnerability existed in Time Tracker invoices.php in versions prior to 1.22.11.5781. This was happening because of a coding error after validating parameters in POST requests. There was no check for error...
CVE-2022-24690
An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A PresAbs.php SQL Injection vulnerability allows unauthenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boolean based. An unauthenticated attacker...
CVE-2021-35487
Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates for the Manage Alerts page via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user,...
CVE-2021-3116
beforeupstreamconnection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean confusion and versus or...