CVE-2024-3875 Tenda F1202 Natlimit fromNatlimit stack-based overflow

A vulnerability was found in Tenda F1202 1.2.0.20408. It has been rated as critical. This issue affects the function fromNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2024-3874 Tenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflow

A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated...

CVE-2024-3689

A vulnerability classified as problematic has been found in Zhejiang Land Zongheng Network Technology O2OA up to 20240403. Affected is an unknown function of the file /xportalassemblesurface/jaxrs/portal/list?v=8.2.3-4-43f4fe3. The manipulation leads to information disclosure. It is possible to...

estetrainingacademy.com Cross Site Scripting vulnerability OBB-3916234

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple issues due to IBM MQ

Summary IBM Sterling B2B Integrator uses IBM MQ. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-28950 DESCRIPTION: IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality...

nadiaclabassi.com Cross Site Scripting vulnerability OBB-3915294

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bhau.org Cross Site Scripting vulnerability OBB-3915138

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

uglyanskoe.ru Cross Site Scripting vulnerability OBB-3915068

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

moscowestates.com Cross Site Scripting vulnerability OBB-3914642

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

content4bizz.nl Cross Site Scripting vulnerability OBB-3914223

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-3618

CVE-2024-3618 affects SourceCodester Kortex Lite Advocate Office Management System 1.0. The vulnerability is in an unknown function of the file /control/activate_case.php where manipulation of the argument id leads to SQL injection . It can be exploited remotely, and the exploit has been disclose...

CVE-2024-3616

The CVE-2024-3616 entry concerns SourceCodester Warehouse Management System v1.0, with a cross-site scripting vulnerability in the file pengguna.php. The vulnerability arises from manipulating the arguments admin_user, admin_nama, admin_alamat, and admin_telepon, allowing remote exploitation. Mul...

CVE-2024-3614

SourceCodester Warehouse Management System 1.0 contains an XSS vulnerability in customer.php, triggered by manipulating the parameters nama_customer, alamat_customer, or notelp_customer. This remote vulnerability affects an unknown portion of the file and has been publicly disclosed; exploitation...

WordPress Product Input Fields for WooCommerce plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Product Input Fields for WooCommerce versions = 1.7.0...

CVE-2024-3541

A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/adminuser.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2024-3540

A vulnerability was found in Campcodes Church Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addsundaysch.php. The manipulation of the argument Gender leads to sql injection. The attack may be launched remotely. The...

CVE-2024-3540

CVE-2024-3540 affects Campcodes Church Management System 1.0. Affected component: /admin/add_sundaysch.php where the Gender parameter can be manipulated to trigger SQL injection. Root cause: unsanitized input in a server-side query, enabling remote exploitation. Publicly disclosed exploit exists....

CVE-2024-3539

CVE-2024-3539 affects Campcodes Church Management System 1.0. A SQL injection vulnerability exists in the /admin/addgiving.php file, caused by improper handling of the amount parameter. The attack is remotely exploitable and has publicly disclosed exploit information. Affected CVSS metrics indica...

CVE-2024-3536

CVE-2024-3536 affects Campcodes Church Management System 1.0. The vulnerability is a SQL injection in the /admin/delete_log.php file caused by unsafely handling the selector parameter. Exploitation is possible remotely, and public exploit information has been disclosed. Impact is described variab...

CVE-2024-3535

A vulnerability, which was classified as critical, was found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...