CVE-2023-23637: Improper Neutralization of Input During Web Page Generation

IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modifyonto request to the ontology builder. This may allow attackers to steal Protected Health Information...

CVE-2023-23637

IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modifyonto request to the ontology builder. This may allow attackers to steal Protected Health Information...

CVE-2023-0296

The Birthday attack against 64-bit block ciphers CVE-2016-2183 was reported for the health checks port 9979 on the etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port...

DEBIAN-CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

UBUNTU-CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

CVE-2023-22496 Netdata vulnerable to command injection

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

PT-2023-18547

Name of the Vulnerable Software and Affected Versions Netdata agent versions prior to 1.37 stable and 1.36.0-409 nightly Description An issue exists where an attacker can execute arbitrary commands on a targeted Netdata agent by establishing a streaming connection and providing a specially crafte...

CVE-2022-46471

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consultingid parameter at /healthcare/Admin/consultingdetail.php...

CVE-2022-46471

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consultingid parameter at /healthcare/Admin/consultingdetail.php...

Sql injection

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consultingid parameter at /healthcare/Admin/consultingdetail.php...

Online Health Care System SQL注入漏洞

Online Health Care System is an online health care system by janobe individual developers. A security vulnerability exists in Online Health Care System v1.0, which stems from the consultingid parameter in its /healthcare/Admin/consultingdetail.php file that allows an attacker to implement SQL...

CVE-2022-46471

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consultingid parameter at /healthcare/Admin/consultingdetail.php...

CVE-2022-46471

CVE-2022-46471 affects Online Health Care System v1.0. The vulnerability is a SQL injection in the /healthcare/Admin/consulting_detail.php endpoint via the consulting_id parameter, leading to potential impact on confidentiality, integrity, and availability (CVSS v3.1: 9.8, CRITICAL). Public detai...

CVE-2022-46471

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consultingid parameter at /healthcare/Admin/consultingdetail.php...

CVE-2022-46471: Improper Neutralization of Special Elements used in an SQL Command

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consultingid parameter at /healthcare/Admin/consultingdetail.php...

US school district sues Facebook, Instagram, Snapchat, TikTok over harm to kids

Public schools in a Seattle district filed a lawsuit on Friday against parent companies of the biggest social networks on the internet, alleging social media is to blame for "a youth mental health crisis", and saying these companies have purposefully designed, refined, and operated their platform...

aorahealth.com Cross Site Scripting vulnerability OBB-3121329

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sphere.health Cross Site Scripting vulnerability OBB-3108831

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3882

CVE-2022-3882 concerns the WordPress WP Memory plugin prior to 2.46. The vulnerability is a lack of proper authorization and CSRF protection in an AJAX action, allowing any authenticated user (e.g., a subscriber) to call the action and install/activate arbitrary plugins from wordpress.org. Connec...

CVE-2022-3882: Cross-Site Request Forgery (CSRF)

The Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Plugin WordPress plugin before 2.46 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.o...