CVE-2021-34166

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

CVE-2021-34166: Improper Neutralization of Special Elements used in an SQL Command

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

CVE-2021-34165: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability in Sourcecodester Basic Shopping Cart 1.0 allows a remote attacker to Bypass Authentication and become Admin...

CVE-2020-21934

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed...

Sql injection

SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

CVE-2021-32678: Improper Control of Interaction Frequency

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, ratelimits are not applied to OCS API responses. This affects any OCS API controller OCSController using the @BruteForceProtection annotation. Risk depends on the installed...

CVE-2021-25442: Improper Privilege Management

Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication...

U.S. Dept Of Defense: SQL injection my method -1 OR 3*2*1=6 AND 000159=000159

URL: https://█████ Parameter: ███ Attack Details JSON input █████ was set to -1 OR 321=6 AND 000159=000159 Tests performed: -1 OR 2+159-159-1=0+0+0+1 = TRUE -1 OR 3+159-159-1=0+0+0+1 = FALSE -1 OR 32 FALSE -1 OR 320+5+159-159 = FALSE -1 OR 2+1-1+1=1 AND 000159=000159 = FALSE -1 OR 32=5 AND...

Advisory ROSA-SA-2021-1921

Software: modauthmellon 0.14.0 OS: Cobalt 7.9 CVE-ID: CVE-2019-3878 CVE-Crit: HIGH CVE-DESC: A vulnerability was discovered in modauthmellon before v0.14.2. If Apache is configured as a reverse proxy server and modauthmellon is configured to allow only authenticated users with the require...

CVE-2019-17567: Inconsistent Interpretation of HTTP Requests

Apache HTTP Server versions 2.4.6 to 2.4.46 modproxywstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authenticati...

Security Update for Windows Defender (June 2021)

The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is equal or prior to 1.1.17800.5. It is, therefore, affected by multiple vulnerabilities. - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and...

OpenVPN 授权问题漏洞

Openvpn OpenVPN is a software package for creating virtual private network VPN encrypted channels from the US-based OpenVPN Openvpn, which uses the OpenSSL library to encrypt data and control information and allows the created VPN to be authenticated using a public key, an electronic certificate,...

Logic Flaw Vulnerability in RG-NBS Series by Riptide Networks

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A logic flaw vulnerability exists in Ruijie Networks RG-NBS series. An attacker can...

CVE-2021-23008

On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and all versions of 16.0.x and 11.6.x., BIG-IP APM AD Active Directory authentication can be bypassed via a spoofed AS-REP Kerberos Authentication Service Response response sent over a hijacked KDC...

Logic flaw vulnerability in the backend of the mayday blog system

mayday blog system is based on springboot, mybatis, ehcache, thymeleaf, bootstrap to do the blog system , support markdown editor Java blog system . mayday blog system backend there is a logic flaw vulnerability. Attackers can use the vulnerability to bypass authentication and obtain sensitive...

Logic Flaw Vulnerability in SpringBoot-Blog

SpringBoot-Blog is a Java blog system . A logic flaw vulnerability exists in SpringBoot-Blog. An attacker can exploit the vulnerability to bypass authentication and obtain sensitive information...

CVE-2021-1284: Improper Access Control

A vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to bypass authentication and authorization and modify the configuration of an affected system. To exploit this vulnerability, the attacker must be able t...

CVE-2020-19111: Improper Authentication

Incorrect Access Control vulnerability in Online Book Store v1.0 via adminverify.php, which could let a remote mailicious user bypass authentication and obtain sensitive information...

PT-2021-10282 · Unknown · Online Book Store

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue is related to an Incorrect Access Control vulnerability. It could allow a remote malicious user to bypass authentication and obtain sensitive information via the admin verify.php endpoint...

SUSE: Security Advisory (SUSE-SU-2020:1672-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...