Lucene search
+L

7329 matches found

Openbugbounty
Openbugbounty
added 2024/04/21 7:10 a.m.16 views

pattonfuneralhome1962.com Cross Site Scripting vulnerability OBB-3919103

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2024/04/18 11:15 a.m.11 views

CVE-2024-3948

A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack may be launch...

9.8CVSS5.3AI score0.00856EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/04/18 11:00 a.m.17 views

CVE-2024-3948 SourceCodester Home Clean Service System Photo student.add.php unrestricted upload

A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack may be launch...

6.5CVSS6.5AI score0.00856EPSS
SaveExploits1References4
CVE
CVE
added 2024/04/18 11:00 a.m.75 views

CVE-2024-3948

CVE-2024-3948 affects SourceCodester Home Clean Service System 1.0. The issue is described as a vulnerability in the Photo Handler component, specifically a flaw in the file cornered to the admin\student.add.php (noted as admin\student.add.php in the public description) that enables unrestricted ...

9.8CVSS6.8AI score0.00856EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2024/04/18 12:00 a.m.15 views

SourceCodester Home Clean Service System 代码问题漏洞

Home Clean Service System is a system for providing home cleaning services by Carlo Montero, an individual developer. A code issue vulnerability exists in SourceCodester Home Clean Service System version 1.0, which stems from a file upload vulnerability in the file adminstudent.add.php...

9.8CVSS6.8AI score0.00856EPSS
SaveExploits1References5
NVD
NVD
added 2024/04/17 9:15 p.m.20 views

CVE-2024-32341

Multiple cross-site scripting XSS vulnerabilities in the Home page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters...

5.4CVSS5.9AI score0.00386EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/17 12:00 a.m.9 views

WonderCMS 安全漏洞

WonderCMS is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in WonderCMS v3.4.3, which stems from the lack of effective filtering and escaping of user-supplied data on the Home page, and can be exploited by an attacker to steal the victim's...

5.4CVSS6.4AI score0.00386EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/04/17 12:00 a.m.8 views

Tenda FH1203 安全漏洞

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a command injection vulnerability that stems from the cmdinput parameter of the formexeCommand method failing to properly filter construct command special characters,...

7.3CVSS8.2AI score0.0088EPSS
SaveExploits1References2
Krebs on Security
Krebs on Security
added 2024/04/16 11:26 a.m.30 views

Who Stole 3.6M Tax Records from South Carolina?

For nearly a dozen years, residents of South Carolina have been kept in the dark by state and federal investigators over who was responsible for hacking into the states revenue department in 2012 and stealing tax and bank account information for 3.6 million people. The answer may no longer be a...

7.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/04/11 5:20 p.m.7 views

graingerhomeimprovements.com Cross Site Scripting vulnerability OBB-3917299

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Cvelist
Cvelist
added 2024/04/10 12:00 a.m.29 views

CVE-2024-29460

An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the missionblock.cpp component...

6.7AI score0.00242EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/04/10 12:00 a.m.12 views

CVE-2024-29460

An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the missionblock.cpp component...

6.9AI score0.00242EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
added 2024/04/09 10:28 a.m.8 views

tnhometour.com Cross Site Scripting vulnerability OBB-3911918

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/04/05 3:45 p.m.11 views

home-teach.ru Cross Site Scripting vulnerability OBB-3906267

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
HackRead
HackRead
added 2024/04/05 2:02 p.m.31 views

Alleged Home Depot Data Breach: IntelBroker Leaks 22,000 Employee Data

By Waqas Another day, another data breach by IntelBroker hacker targeting a US-based giant! This is a post from HackRead.com Read the original post: Alleged Home Depot Data Breach: IntelBroker Leaks 22,000 Employee Data...

7.3AI score
SaveExploits0
NVD
NVD
added 2024/04/04 6:15 p.m.24 views

CVE-2024-25699

There is a difficult‑to‑exploit improper authentication issue in the Home application for Esri Portal for ArcGIS versions 11.2 and below on Windows and Linux, and ArcGIS Enterprise versions 11.1 and below on Kubernetes, which under unique circumstances could allow a remote, authenticated attacker...

8.5CVSS8.6AI score0.00693EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/04 12:00 a.m.12 views

PT-2024-21097

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions 10.8.1 through 11.2 ArcGIS Enterprise versions 11.1 and below Description The issue is related to improper authentication in the Home application, which could potentially allow a remote, unauthenticated attacker...

8.5CVSS5.5AI score0.00693EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/04/04 12:00 a.m.14 views

PT-2024-21100 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: Home appliance software affected versions not specified Description: A reflected cross-site scripting issue has been identified. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

6.4AI score
SaveExploits0References2
NVD
NVD
added 2024/04/03 10:15 p.m.18 views

CVE-2023-52043

An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...

8.1CVSS6.9AI score0.00301EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/04/02 12:00 a.m.14 views

Microsoft Windows 10 21H2 Home SEoL

Microsoft Windows 10 21H2 Home is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

5.4AI score
SaveExploits0References1
Rows per page
Query Builder