Simple Student Attendance System Security Vulnerability

Simple Student Attendance System is a simple student attendance system. A security vulnerability exists in Simple Student Attendance System v1.0, which stems from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary code via a crafted GET request...

CVE-2024-22543

An issue was discovered in Linksys Router E1700 1.0.04 build 3, allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/ URI or via the ExportSettings function...

CVE-2024-23763

SQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL commands via crafted GET request using modifiersattribute parameter...

CVE-2024-24495

SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request...

CVE-2024-24495

SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request...

Sql injection

SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request...

Daily Habit Tracker SQL Injection Vulnerability

Daily Habit Tracker is a daily habit tracker by rems personal developer. Daily Habit Tracker version v.1.0 suffers from a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability that allows remote attackers to execute arbitrary code via a crafted GET request...

The vulnerability of the devinfo interface in D-Link’s microprogrammed router software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the devinfo interface in D-Link’s microprogrammed router software is related to insufficient protection of operational data during the processing of the area parameter. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information by...

CVE-2023-39691

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...

CVE-2023-39691

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...

CVE-2023-39691

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...

CVE-2023-39691

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...

kodbox security breach

kodbox is a network file manager. A security vulnerability exists in kodbox version v1.43, which stems from a vulnerability that allows an attacker to arbitrarily add administrator accounts via a crafted GET request...

Fortinet PortiPortal Security Vulnerability

Fortinet PortiPortal is a cloud-based multi-tenant portal from Fortinet, Inc. for security policy management and analysis. A security vulnerability exists in Fortinet PortiPortal version 7.2.1 and earlier, version 7.0.6 and earlier, version 6.0.14 and earlier, and version 5.3.8. An attacker could...

CVE-2023-24048

Cross Site Request Forgery CSRF vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via crafted GET request to /manpassword.htm...

Microcks Security Vulnerabilities

Microcks is an open source Kubernetes tool for API simulation and testing. A security vulnerability exists in Microcks version 1.17.1 and prior versions. An attacker could exploit the vulnerability to access network resources and sensitive information via a specially crafted GET request...

CVE-2023-24048

The CVE-2023-24048 entry concerns a CSRF vulnerability in Connectize AC21000 G6 641.139.1.1256. The description states that attackers can gain control of the device via a crafted GET request to /man_password.htm. The connected Red Hat CVE entries reiterate the same description but there is no add...

Connectize G6 AC2100 Security Vulnerability

The Connectize G6 AC2100 is a wireless router from Connectize. A security vulnerability exists in the Connectize G6 AC2100 version 641.139.1.1256, which stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker could exploit the vulnerability to take control of the...

Directory traversal

Directory Traversal vulnerability in TerraMaster v.s1.0 through v.2.295 allows a remote attacker to obtain sensitive information via a crafted GET request...

CVE-2023-38322

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a dobinauth NULL pointer dereference that be triggered with a crafted GET HTTP request with a missing User-Agent HTTP header. Triggering this issue results in crashing OpenNDS a Denial-of-Service condition. The issue...