CVE-2024-37791

DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?classid...

CVE-2023-5527: Improper Neutralization of Formula Elements in a CSV File

The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV files exported by...

CVE-2024-6067

A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /mces/?p=class/viewclass. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

CVE-2024-6067

A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /mces/?p=class/viewclass. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

CVE-2024-6067 SourceCodester Music Class Enrollment System sql injection

A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /mces/?p=class/viewclass. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

CVE-2024-6067 SourceCodester Music Class Enrollment System sql injection

A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /mces/?p=class/viewclass. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

CVE-2024-6067

CVE-2024-6067 affects SourceCodester Music Class Enrollment System 1.0. The vulnerability is an SQL injection in the endpoint "/mces/?p=class/view_class" driven by manipulating the id parameter. It is a remote, publicly disclosed vulnerability with no user interaction required. Multiple sources r...

CVE-2024-6043

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file adminclass.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploi...

Music Class Enrollment System SQL Injection Vulnerability

Music Class Enrollment System is a music class enrollment system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Music Class Enrollment System version 1.0, which stems from a manipulation of the parameter id that can lead to SQL injection...

CVE-2024-6067: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /mces/?p=class/viewclass. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

PT-2024-37361 · Unknown · Sourcecodester Music Class Enrollment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Class Enrollment System version 1.0 Description: A critical issue was found in the SourceCodester Music Class Enrollment System, affecting an unknown functionality of the file "/mces/?p=class/view class". The manipulation...

CVE-2024-6016

A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

Laundry Management System SQL Injection Vulnerability

Laundry Management System is a laundry management system. A SQL injection vulnerability exists in itsourcecode Online Laundry Management System version 1.0, which stems from adminclass.php containing an unknown function that causes SQL injection via the parameter id...

PT-2024-37319 · Unknown · Itsourcecode Online Laundry Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Laundry Management System version 1.0 Description: A critical issue has been found in the itsourcecode Online Laundry Management System, affecting some unknown functionality of the file admin class.php. The manipulation of...

CVE-2023-6492: Cross-Site Request Forgery (CSRF)

The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.13. This is due to missing or incorrect nonce validation in the 'adminnotices' hook found in class-settings.php. This makes it possible...

PT-2024-14970

Name of the Vulnerable Software and Affected Versions The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress versions up to, and including, 3.5.13 Description The issue is due to missing or incorrect nonce validation in the 'admin notices' hook found in class-settings.php. Thi...

Inadequate Encryption Strength

Ninja Core is vulnerable to Inadequate Encryption Strength. The vulnerability is due to the encrypt method in the CookieEncryption class which uses AES with default padding, leading to the possible leakage of sensitive cookie information...

CVE-2024-2965

CVE-2024-2965 affects the LangChain SitemapLoader in langchain-ai/langchain. The parse_sitemap function lacks a guard against self-referential sitemap recursion, enabling an infinite recursion loop that can exhaust server resources and crash the Python process. Multiple trusted sources (NVD, Red ...

CVE-2024-2965 Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

Out-of-Bounds-Read

org.iq80.snappy: snappy is vulnerable to Out-of-Bounds-Read. The vulnerability is due to the usage of the JDK class sun.misc.Unsafe to speed up memory access without performing additional bounds checks, which can result in non-deterministic behavior or a JVM crash...