CVE-2023-1253

SourceCodester Health Center Patient Record Management System 1.0 contains a SQL injection in login.php triggered by manipulating the username parameter. The vulnerability is remotely exploitable and has been publicly disclosed (CVE-2023-1253; NVD CVSS3.1 base score 9.8). Multiple connected sourc...

Health Center Patient Record Management System SQL注入漏洞

Health Center Patient Record Management System is a Health Center Patient Record Management System by Arvin Arandilla Individual Developer. A SQL injection vulnerability exists in SourceCodester Health Center Patient Record Management System version 1.0, which stems from a problem in the file...

Health Center Patient Record Management System 跨站脚本漏洞

Health Center Patient Record Management System is a Health Center Patient Record Management System by Arvin Arandilla Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Health Center Patient Record Management System version 1.0, which stems from an issue with the...

The vulnerability in the web interface of the software for creating Cisco Unified Intelligence Center reports allows a perpetrator to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Unified Intelligence Center software for creating reports exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Cisco Finesse Denial of Service Vulnerability

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. Cisco Finesse suffers from a denial of service vulnerability that stems from incorrect IP address filtering by the reverse proxy, which can be exploited by an attacker to cause a denial of service DoS...

PT-2023-16842 · Sourcecodester · Sourcecodester Health Center Patient Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Health Center Patient Record Management System, affecting the file birthing print.php. The manipulatio...

Qakbot Evolves to OneNote Malware Distribution

Qakbot Evolves to OneNote Malware Distribution By Pham Duy Phuc, John Fokker J.E. and Alejandro Houspanossian · March 07, 2023 This blog was also written by Raghav Kapoor and Mathanraj Thangaraju Qakbot aka QBot, QuakBot, and Pinkslipbot is a sophisticated piece of malware that has been active...

PT-2023-16841 · Sourcecodester · Health Center Patient Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A critical issue was found in the login.php file, where the manipulation of the username argument leads to sql injection. This issue can be exploited...

The vulnerability of the mobile plugin for data processing in Atlassian Jira Service Management Server and Data Center allows a perpetrator to execute an SSRF attack.

The vulnerability of the mobile plugin for data center processing in tlassian Jira Service Management Server and Data Center is related to insufficient testing of requests on the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

CVE-2023-26601

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service DoS...

CVE-2023-26601

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service DoS...

Design/Logic Flaw

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service DoS...

CVE-2023-26600

ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports...

Privilege escalation

ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports...

ZOHO ManageEngine ServiceDesk Plus 资源管理错误漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management, IT Project Management, Procurement and Contract Management module...

ZOHO ManageEngine ServiceDesk Plus 安全漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management, IT Project Management, Procurement and Contract Management module...

The vulnerability of the monitoring system for critical equipment, StruxureWare Data Center Expert, is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary codes.

The vulnerability of the StruxureWare Data Center Expert monitoring system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2023-26601

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service DoS...

The vulnerability of the Path.Combine method in the modular software solution for managing material flows and inventory control processes in the Kardex Mlog Control Center (MCC) allows a perpetrator to execute arbitrary code.

The vulnerability of the Path.Combine method in the modular software solution for managing material flows and inventory control processes in the Kardex Mlog Control Center MCC is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute...

The software for setting up Dell Rugged Control Center is vulnerable due to insufficient verification of input data, allowing attackers to exploit this vulnerability to gain increased privileges.

The software for configuring Dell Rugged Control Centers is vulnerable due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...