15759 matches found
PT-2023-19139 · Unknown · Sourcecodester Online Dj Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online DJ Management System. The issue affects an unknown function of the file admin/events/manage event.php,...
PT-2023-19149 · Unknown · Sourcecodester Online Dj Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online DJ Management System. The issue affects an unknown functionality of the file admin/inquiries/view details.php,...
CVE-2023-30280
Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and cause a denial ofservice via the getInputData parameter of the fwSchedule.cgi page...
NETGEAR R6900和NETGEAR R6700v3 安全漏洞
NETGEAR R6900 and NETGEAR R6700v3 are both products of NETGEAR, Inc.NETGEAR R6900 is a wireless router.NETGEAR R6700v3 is a router. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in the NETGEAR R6900 and NETGEAR R6700v3...
CVE-2022-40724
The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery CSRF through crafted GET requests...
CVE-2022-40724
The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery CSRF through crafted GET requests...
CVE-2022-40724
CVE-2022-40724 affects PingFederate Local Identity Profiles endpoint /pf/idprofile.ping and is a Cross-Site Request Forgery vulnerability triggered by crafted GET requests. Root cause: CSRF on the /pf/idprofile.ping endpoint as described in the CVE record. Impact, per NVD metrics, include high co...
CVE-2022-40724 Cross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint.
The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery CSRF through crafted GET requests...
CVE-2023-2244
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...
Sql injection
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...
CVE-2023-2244
CVE-2023-2244 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is a SQL injection in the GET Parameter Handler of the file /admin/orders/update_status.php, caused by manipulation of the id parameter. It can be exploited remotely; exploitation has been disclosed publicly (VDB-2272...
CVE-2023-2244 SourceCodester Online Eyewear Shop GET Parameter update_status.php sql injection
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...
CVE-2023-2242 SourceCodester Online Computer and Laptop Store GET Parameter sql injection
A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be...
Cross-site Scripting (XSS) - Stored
Description The stored XSS vulnerability found in the caliber-web application is a security flaw that allows an attacker to execute malicious code in a user's browser. The vulnerability affects the "/ajax/pathchooser/" endpoint and is present in the "path" parameter, which is sent via the GET...
PT-2023-18486 · Sourcecodester · Sourcecodester Online Computer/Laptop Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the component GET Parameter Handler, where the manipulation of the c/s argument leads to sql injection. This issue can be exploited...
Online Computer and Laptop Store SQL注入漏洞
Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem with the component GET Parameter Handler, where manipulation...
CVE-2023-1892
A reflected Cross-site Scripting XSS vulnerability was found in sidekiq. This issue may allow code to be executed via multiples endpoints in the GET parameter "period"...
The vulnerability of the `elf_parser::ElfParser::get_segments` function in the `elf_parser.cpp` component of the elf file analysis software `elf-parser`, due to insufficient input validation, allows a perpetrator to cause service interruptions.
The vulnerability of the elfparser::ElfParser::getsegments function in the elfparser.cpp component of the elf file analysis software, elf-parser, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
GHSA-QW69-RQJ8-6QW8 OutOfMemoryError for large multipart without filename in Eclipse Jetty
Impact Servlets with multipart support e.g. annotated with @MultipartConfig that call HttpServletRequest.getParameter or HttpServletRequest.getParts may cause OutOfMemoryError when the client sends a multipart request with a part that has a name but no filename and a very large content. This...