CVE-2023-1360 SourceCodester Employee Payslip Generator with Sending Mail New User Creation sql injection

A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affects some unknown processing of the file classes/Users.php?f=save of the component New User Creation. The manipulation of the argument username leads to sql...

CVE-2023-1360

The CVE-2023-1360 entry concerns SourceCodester Employee Payslip Generator with Sending Mail 1.2.0. Multiple connected sources confirm a SQL injection in the New User Creation flow, specifically via manipulating the username argument in files/Users.php?f=save, allowing remote attacks. No official...

SourceCodester Employee Payslip Generator with Sending Mail SQL注入漏洞

Employee Payslip Generator with Sending Mail is an Employee Payslip Generator with Sending Mail by Carlo Montero Personal Developer. SourceCodester Employee Payslip Generator with Sending Mail version 1.2.0 suffers from a SQL injection vulnerability that stems from an incorrect manipulation of th...

CVE-2023-26489 Guest-controlled out-of-bounds read/write on x86_64 in wasmtime

wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x8664 targets where address-mode computation mistakenly would calculate a 35-bit effective address instead of WebAssembly's defined 33-bit effective address. This bug mea...

Wasmtime 缓冲区错误漏洞

Wasmtime, a Bytecode Consortium project, is a standalone wasm-optimized runtime for WebAssembly and WASI only. Wasmtime suffers from a buffer error vulnerability that stems from the code generator's address pattern calculation incorrectly calculating valid addresses, which can be exploited by an...

Debian: Security Advisory (DLA-600-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Improper Input Validation in Moodle

CVE-2022-35649 Payload Generator using Python 2 and Det...

The vulnerability of the manage_record.php web application used for creating medical certificates, the Medical Certificate Generator App, allows a violator to execute arbitrary SQL code.

The vulnerability of the managerecord.php web application used for creating medical certificates in the Medical Certificate Generator App is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code...

Insecure Random Number Generator

lemur is vulnerable to an Insecure Random Number Generator. The vulnerability is due to the getpsuedorandomstring function in utils.py, caused to the usage of the insecure random library, which can result in authentication bypass in multiple services. The random library was used to generate the...

CVE-2023-26491

RSSHub is affected by a cross-site scripting (XSS) vulnerability caused by improper handling of certain special characters in URL parameters. The issue allows an attacker to execute arbitrary JavaScript when users access a deliberately constructed URL. A fix was committed in version c910c4d28717f...

SUSE-SU-2023:0616-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names bsc1205244. Bugfixes: - Solve a program error in the Python Garbage Collection. bsc1188607 - Fixed issue where email.generator.py replaces a non-existent header bsc120844...

WordPress Button Generator – easily Button Builder Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Button Generator – easily Button Builder Type Plugin Vulnerable versions = 2.3.3 Fixed in 2.3.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27452 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5f62ad483358 Credit...

WordPress Preview Link Generator Plugin < 1.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Preview Link Generator Type Plugin Vulnerable versions 1.0.4 Fixed in 1.0.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-1086 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1a96dff3de79 Credits WPScan Required...

WordPress XML Sitemap Generator for Google Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software XML Sitemap Generator for Google Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-26514 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID f206684cd2cf Credits Ri...

SUSE-SU-2023:0549-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names bsc1205244. Bugfixes: - Fixed issue where email.generator.py replaces a non-existent header bsc1208443...

Reflected Cross-site Scripting (XSS)

generator-hottowel is vulnerable to Reflected Cross-site Scripting XSS attacks. The library does not properly handle invalid calls to assets as it uses a custom 404 response object, allowing an attacker to inject and execute JavaScript through the app.use function in app/templates/src/server/app....

CVE-2023-1006

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suff...

Cross site scripting

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suff...

CVE-2023-1006 SourceCodester Medical Certificate Generator App New Record cross site scripting

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suff...

CVE-2023-1006

The CVE-2023-1006 entry concerns SourceCodester Medical Certificate Generator App 1.0. Affected: the New Record Handler component. Vulnerability: cross-site scripting caused by manipulation of input arguments (Firstname, Middlename, Lastname, Suffix, Nationality, Doctor Fullname, Doctor Suffix) w...