CVE-2024-12659

A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been classified as problematic. Affected is the function 0x8001E004 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a...

CVE-2024-11967 PHPGurukul Complaint Management system reset-password.php sql injection

A vulnerability was found in PHPGurukul Complaint Management system 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/reset-password.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-11248 Tenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-11073

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

CVE-2024-10422 SourceCodester Attendance and Payroll System overtime_add.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processing of the file /admin/overtimeadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. T...

WordPress AffiliateX plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin AffiliateX versions = 1.2.9...

CVE-2024-9514 D-Link DIR-605L formSetDomainFilter buffer overflow

A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been declared as critical. This vulnerability affects the function formSetDomainFilter of the file /goform/formSetDomainFilter. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely...

CVE-2024-9514

CVE-2024-9514 affects the D-Link DIR-605L router (2.13B01 BETA). The vulnerability is in the function formSetDomainFilter (/goform/formSetDomainFilter); manipulation of the curTime argument causes a buffer overflow. It can be triggered remotely, and the exploit has been disclosed publicly. Severa...

CVE-2024-9275

A vulnerability was found in jeanmarc77 123solar up to 1.8.4.5. It has been rated as critical. This issue affects some unknown processing of the file /admin/admininvt2.php. The manipulation of the argument PROTOCOLx leads to file inclusion. The attack may be initiated remotely. The exploit has be...

CVE-2024-8368

A vulnerability was found in code-projects Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched...

CVE-2024-7949

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

CVE-2024-7929

CVE-2024-7929 corresponds to SourceCodester Simple Forum Website 1.0. A cross-site scripting vulnerability exists in the Signup Page component, specifically the /registration.php file, due to manipulation of the username parameter. The flaw can be exploited remotely and has been disclosed publicl...

CVE-2024-7106 Spina CMS media_folders cross-site request forgery

A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown functionality of the file /admin/mediafolders. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2024-6067

CVE-2024-6067 affects SourceCodester Music Class Enrollment System 1.0. The vulnerability is an SQL injection in the endpoint "/mces/?p=class/view_class" driven by manipulating the id parameter. It is a remote, publicly disclosed vulnerability with no user interaction required. Multiple sources r...

CVE-2024-4673 Campcodes Complete Web-Based School Management System show_student_grade_subject.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/showstudentgradesubject.php. The manipulation of the argument id leads to cross site scripting...

CVE-2024-3354

A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/modusers/index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

CVE-2024-3141

CVE-2024-3141 affects Clavister E10/E80 up to 14.00.10. The vulnerability lies in the Misc Settings Page component, specifically the file path related to /?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettings, where manipulation of the arguments WatchdogTimerTime, BufFloodRebootTime...

CVE-2024-2983 Tenda FH1202 SetClientState formSetClientState stack-based overflow

A vulnerability was found in Tenda FH1202 1.2.0.14408 and classified as critical. Affected by this issue is the function formSetClientState of the file /goform/SetClientState. The manipulation of the argument deviceId/limitSpeed/limitSpeedUp leads to stack-based buffer overflow. The attack may be...

CVE-2024-2853 Tenda AC10U setsambacfg formSetSambaConf os command injection

A vulnerability was found in Tenda AC10U 15.03.06.48/15.03.06.49. It has been rated as critical. This issue affects the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. The attack may be initiated remotely. The...

CVE-2024-2686 Campcodes Online Job Finder System controller.php cross site scripting

A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/applicants/controller.php. The manipulation of the argument JOBREGID leads to cross site scripting. The attack can be initiated...