Lucene search
+L

19809 matches found

Cvelist
Cvelist
•added 2024/01/08 9:00 a.m.•40 views

CVE-2024-0306 Kashipara Dynamic Lab Management System admin_login_process.php sql injection

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminloginprocess.php. The manipulation of the argument adminpassword leads to sql injection. It is possible to initiate the attack...

7.5CVSS8.1AI score0.00668EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/08 9:00 a.m.•73 views

CVE-2024-0306

CVE-2024-0306 affects Kashipara Dynamic Lab Management System (versions up to 1.0). The vulnerability is an SQL injection in the file /admin/admin_login_process.php caused by manipulation of the admin_password argument. It can be exploited remotely and the exploit has been publicly disclosed. Imp...

7.5CVSS7.8AI score0.00668EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/08 9:00 a.m.•10 views

CVE-2024-0306 Kashipara Dynamic Lab Management System admin_login_process.php sql injection

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminloginprocess.php. The manipulation of the argument adminpassword leads to sql injection. It is possible to initiate the attack...

7.5CVSS7.7AI score0.00668EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•14 views

CVE-2022-34344: Missing Authorization

Missing Authorization vulnerability in Rymera Web Co Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynamic Pricing & More.This issue affects Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles,...

8.8CVSS7.8AI score0.0046EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•7 views

CVE-2024-0306: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminloginprocess.php. The manipulation of the argument adminpassword leads to sql injection. It is possible to initiate the attack...

7.5CVSS6.8AI score0.00668EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•24 views

PT-2024-1183 · Bosch · Bosch Nexo Cordless Nutrunner +1

Name of the Vulnerable Software and Affected Versions: Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner affected versions not specified Description: The issue allows an unauthenticated remote attacker to perform a Denial-of-Service DoS attack or, possibly, obtain Remote Cod...

10CVSS9.7AI score0.00763EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•22 views

PT-2024-15458 · Unknown · Kashipara Dynamic Lab Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Dynamic Lab Management System versions up to 1.0 Description: A critical vulnerability has been found in the Kashipara Dynamic Lab Management System. The issue affects unknown code in the file login process.php. The manipulation of...

7.5CVSS8.2AI score0.00733EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•21 views

PT-2024-15457 · Unknown · Kashipara Dynamic Lab Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Dynamic Lab Management System versions up to 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /admin/admin login process.php. The manipulation of the admin password argument leads to S...

7.5CVSS7.8AI score0.00668EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•26 views

PT-2024-1066 · Openvpn · Openvpn Connect

Name of the Vulnerable Software and Affected Versions: OpenVPN Connect versions 3.0 through 3.4.6 Description: The issue is related to the failure to neutralize instructions in dynamically executed code. Exploitation of this issue may allow an attacker to execute arbitrary code using the DYLD...

7.8CVSS8AI score0.00239EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•22 views

Kashipara Dynamic Lab Management System SQL Injection Vulnerability

Kashipara Dynamic Lab Management System is a dynamic lab management system from Kashipara. A SQL injection vulnerability exists in Kashipara Dynamic Lab Management System 1.0 and earlier versions, which originates from a SQL injection vulnerability in the file /admin/adminloginprocess.php...

7.5CVSS7.9AI score0.00668EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•7 views

CVE-2024-0307: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginprocess.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The explo...

7.5CVSS6.8AI score0.00733EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•23 views

OpenVPN Connect Security Breach

OpenVPN Connect is a VPN Virtual Private Network client application from US-based OpenVPN. A security vulnerability exists in OpenVPN Connect versions 3.0 through 3.4.6, which stems from a vulnerability that allows local users to execute code in external third-party libraries using the...

7.8CVSS6.9AI score0.00239EPSS
SaveExploits0References2
Circl
Circl
•added 2024/01/06 6:26 p.m.•22 views

CVE-2023-48614

creationtimestamp| type| source ---|---|--- 2024-01-06 18:26:37+00:00| seen| https://t.me/ctinow/163981...

5.4CVSS5.5AI score0.00597EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/01/06 12:00 a.m.•30 views

DHCP Server Disclosure

The vulnerability of the DHCP server service in Windows operating systems is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

5.3CVSS6.9AI score0.01998EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/01/05 8:15 a.m.•17 views

CVE-2023-52150

Cross-Site Request Forgery CSRF vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynamic Content for Elementor: from n/a before 2.12.5...

8.8CVSS7.3AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/05 8:15 a.m.•32 views

CVE-2023-52150

Cross-Site Request Forgery CSRF vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynamic Content for Elementor: from n/a before 2.12.5...

8.8CVSS8.8AI score0.00274EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/05 8:15 a.m.•28 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynamic Content for Elementor: from n/a before 2.12.5...

6.8CVSS7.3AI score0.00274EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/01/05 8:07 a.m.•73 views

CVE-2023-52150

Technical details for CVE-2023-52150 are not publicly available in the provided Connected Documents. Monitor for updates.

8.8CVSS8.5AI score0.00274EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/01/05 8:07 a.m.•41 views

CVE-2023-52150 WordPress Dynamic Content for Elementor Plugin < 2.12.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynamic Content for Elementor: from n/a before 2.12.5...

8.8CVSS8.9AI score0.00274EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/01/05 8:07 a.m.•4 views

CVE-2023-52150 WordPress Dynamic Content for Elementor Plugin < 2.12.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynamic Content for Elementor: from n/a before 2.12.5...

8.8CVSS9.6AI score0.00274EPSS
SaveExploits0References1
Rows per page
Query Builder