CVE-2024-7165

A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewpayment.php. The manipulation of the argument efid leads to sql injection. The attack may be initiated remotely. The exploit has been...

PT-2024-38127 · Unknown · Sourcecodester School Fees Payment System

Name of the Vulnerable Software and Affected Versions: SourceCodester School Fees Payment System version 1.0 Description: A critical issue affects the processing of the file /view payment.php, where the manipulation of the argument ef id leads to sql injection. The attack can be initiated remotel...

SourceCodester School Fees Payment System SQL Injection Vulnerability

SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the efid parameter of the /viewpayment.php file...

SourceCodester School Fees Payment System SQL Injection Vulnerability

SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the efid parameter of the /receipt.php file...

CVE-2024-28090

Technicolor TC8715D TC8715D-01.EF.04.38.00-180405-S-FF9-D RSE-TC8717T devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via User name in dyndns.asp...

ef-fective.co.jp Improper Access Control vulnerability OBB-3843517

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-3769 Vulnerability in Ingeteam's INGEPAC EF

Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication,...

CVE-2023-3768 Vulnerability in Ingeteam's INGEPAC EF/DA

Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication,...

D-Link DWL-6610AP Sub Function Buffer Overflow

The vulnerability of the sub2EF50 function in D-Link DWL-6610AP wireless access points relates to the failure to eliminate special elements used in the operating system’s command for processing the manual-time-string parameter. Exploiting this vulnerability allows an attacker to compromise the...

PT-2023-36063 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state involves several functions: sc hsm write ef, sc hsm update binary, and sc upda...

SUSE CVE-2012-4024

Stack-based buffer overflow in the getcomponent function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted list file aka a crafted file for the -ef option. NOTE: probably in most cases, the list file is a trusted file...

PT-2022-18610

Name of the Vulnerable Software and Affected Versions ril property setting versions prior to SMR April-2022 Release 1 Description The issue allows unauthorized access to the EF RUIMID value due to an information exposure vulnerability in the ril property setting. Recommendations For versions prio...

Samsung SMR security vulnerabilities

Samsung SMR is a system patch package from South Korea's Samsung Samsung. An information disclosure vulnerability exists in versions prior to Samsung SMR Apr-2022 Release 1, which can be exploited by attackers to cause unauthorized access to the EFRUIMID value...

PT-2022-36875

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details include a crash type of Heap-buffer-overflow WRITE 8, with a crash state involving...

PT-2020-22000

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions hextoint, get name from EF DatiPersonali, and itacns add data files...

PT-2020-21993

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 7 crash has been reported. The crash involves the functions hextoint, get name from EF DatiPersonali, and itacns add data files...

ef-czech.cz XSS vulnerability

Open Bug Bounty ID: OBB-643347 Description| Value ---|--- Affected Website:| ef-czech.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ef-online.net XSS vulnerability

Open Bug Bounty ID: OBB-458175 Description| Value ---|--- Affected Website:| ef-online.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

PT-2017-17060

Name of the Vulnerable Software and Affected Versions Ettercap versions 0.8.2 and earlier Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, by utilizing a crafted filter. This is related to the compile tree function in ef compiler.c in...

DEBIAN-CVE-2012-4024

Stack-based buffer overflow in the getcomponent function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted list file aka a crafted file for the -ef option. NOTE: probably in most cases, the list file is a trusted file...