Lucene search
+L

6527 matches found

CNNVD
CNNVD
added 2023/04/14 12:00 a.m.8 views

Campcodes Online Traffic Offense Management System SQL注入漏洞

Campcodes Online Traffic Offense Management System is a web-based traffic offense management system. A SQL injection vulnerability exists in Campcodes Online Traffic Offense Management System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the paramet...

8.8CVSS8AI score0.0074EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.11 views

Online Voting System SQL注入漏洞

Campcodes Advanced Online Voting System is an online voting system. A SQL injection vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of validation of externally entered SQL statements in the parameter id of the file /admin/positionsrow.ph...

8.8CVSS8.2AI score0.00747EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.9 views

Online Voting System SQL注入漏洞

Campcodes Advanced Online Voting System is an online voting system. The Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter description of the file /admin/positionsadd.ph...

8.8CVSS7.9AI score0.00788EPSS
SaveExploits1References4
CNVD
CNVD
added 2023/04/13 12:00 a.m.12 views

SQL Injection Vulnerability in Macroview HCM Human Resource Management System

Macroview HCM Human Resource Management System is a human resource management software. A SQL injection vulnerability exists in Macroview HCM Human Resource Management System, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2023/04/12 1:00 a.m.20 views

Don't plug your phone into a free charging station, warns FBI

In a recent tweet, the FBI office in Denver warned consumers against using free public charging stations, stating that criminals have managed to hijack public chargers with the objective of infecting devices with malware or other software that can give hackers access to your phone, tablet or...

6.5AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2023/04/11 1:00 a.m.16 views

A week in security (April 3 - 9)

Last week on Malwarebytes Labs: TikTok: Whats going on and should I be worried? Super FabriXss: an RCE vulnerability in Azure Service Fabric Explorer Big changes to Twitter verification: How to spot a verified account New macOS malware steals sensitive info, including a user's entire Keychain...

6.6AI score
SaveExploits0
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.9 views

Sales Tracker Management System SQL注入漏洞

Sales Tracker Management System is a sales tracking management system. Sales Tracker Management System v1.0 is vulnerable to SQL injection. The vulnerability originates from the missing validation of the parameter id of /admin/products/manageproduct.php for external input SQL statements. An...

9.8CVSS7.8AI score0.00737EPSS
SaveExploits1References4
CNVD
CNVD
added 2023/04/11 12:00 a.m.52 views

Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29386)

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the fi...

9.2AI score0.00717EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2023/04/11 12:00 a.m.41 views

Online Payroll System SQL Injection Vulnerability (CNVD-2023-29398)

Online Payroll System is a system for distributing payroll online. Online Payroll System v1.0 version has SQL injection vulnerability, the vulnerability originates from the /admin/deductionrow.php parameter id lack of validation of external input SQL statements, an attacker can use this...

9.9AI score0.00808EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.10 views

Sourcecodester Complaint Management System SQL注入漏洞

Complaint Management System is an open source Php project . Used to request a complaint through the online service . Complaint Management System v1.0 version of the SQL injection vulnerability, the vulnerability stems from the component POST Parameter Handler file/users/checkavailability.php to t...

9.8CVSS8.1AI score0.00776EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.10 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to a SQL injection vulnerability in the file /classes/Master.php?f=updateorderstatus, where the parameter id of the function...

7.2CVSS8.2AI score0.00767EPSS
SaveExploits1References4
CNVD
CNVD
added 2023/04/10 12:00 a.m.31 views

Online Computer and Laptop Store SQL Injection Vulnerability

Online Computer and Laptop Store is an online computer and laptop sales system. Online Computer and Laptop Store is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection and steal data, among other things...

9.2AI score0.00717EPSS
SaveExploits1
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.13 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop sales system. Online Computer and Laptop Store is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection and steal data, among other things...

8.8CVSS8AI score0.00717EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.12 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the fi...

9.8CVSS7.9AI score0.00726EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.14 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the fi...

8.8CVSS7.9AI score0.00717EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.9 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter category of...

8.8CVSS7.9AI score0.00717EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.14 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS7.8AI score0.00726EPSS
SaveExploits1References4
The Hacker News
The Hacker News
added 2023/04/07 12:32 p.m.47 views

Researchers Uncover Thriving Phishing Kit Market on Telegram Channels

In yet another sign that Telegram is increasingly becoming a thriving hub for cybercrime, researchers have found that threat actors are using the messaging platform to peddle phishing kits and help set up phishing campaigns. "To promote their 'goods,' phishers create Telegram channels through whi...

7AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2023/04/06 12:00 p.m.23 views

Uber data theft: Driver info stolen after law firm breached

Uber, yet again, has become a victim of data theft following a third-party breach. This time, threat actors have aimed at the company's law firm, Genova Burns. Data of Uber's drivers may have been swiped during the security incident. According to the letter sent to affected drivers, the firm beca...

6.6AI score
SaveExploits0
GithubExploit
GithubExploit
added 2023/04/06 3:40 a.m.501 views

Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer

This exploit is a Python script designed to exploit the CVE-2023...

7.2CVSS7.8AI score0.99999EPSS
SaveExploits12
Rows per page
Query Builder