7335 matches found
Sql injection
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...
CVE-2022-25096
Home Owners Collection Management System v1.0 contains a SQL injection vulnerability via the id parameter in /members/view_member.php. Exploitation details in related sources indicate potential for elevated/admin access and data exfiltration; time-based payloads are described in a 0day/exploit en...
CVE-2022-25096
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...
CVE-2022-25095
CVE-2022-25095 affects Home Owners Collection Management System v1.0. A crafted unauthenticated POST request allows an attacker to compromise user accounts, indicating a failure of authentication/authorization controls. The vulnerability’s impact is described as allowing account compromise with p...
CVE-2022-25094
CVE-2022-25094 affects Home Owners Collection Management System v1.0. The vulnerability is a remote code execution (RCE) caused by handling of the cover parameter in SystemSettings.php, allowing an attacker to execute code on the vulnerable system. Multiple connected advisories and vendors corrob...
Home Owners Collection Management System SQL注入漏洞
Home Owners Collection Management System is an owner collection management system. Home Owners Collection Management System contains a SQL injection vulnerability, which originates from the id parameter in the member view member.php, which is found in Home Owners Collection Management System v1.0...
Home Owners Collection Management System 安全漏洞
A security vulnerability exists in the Home Owners Collection Management System, a homeowner collection management system, which can be exploited by attackers to compromise user accounts via a crafted POST request...
CVE-2022-23135
There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...
CVE-2022-23135
There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...
Directory traversal
There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...
CVE-2022-23135
The CVE-2022-23135 entry concerns a directory traversal vulnerability in ZTE Zxhn F677 home gateways. The connected documents specify that versions prior to 9.0.0p1n29 expose a flaw where the lack of validation of user-modified destination paths allows an attacker with certain permissions to modi...
WordPress WP Home Page Menu plugin <= 3.0 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by fuzzyap1 in WordPress WP Home Page Menu plugin versions = 3.0. Solution Update the WordPress WP Home Page Menu plugin to the latest available version at least 3.1...
Information Disclosure
github.com/snapcore/snapd is vulnerable to information disclosure. The vulnerability exists due to the library does not properly specify the owner-only permission in /snap directories of user home directories, allowing an attacker to read sensitive information through the $SNAPUSERDATA or...
DEBIAN-CVE-2021-3155
snapd 2.54.2 and earlier created /snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1...
CVE-2021-3155
snapd 2.54.2 and earlier created /snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1...
CVE-2021-3155
snapd 2.54.2 and earlier created /snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1...
D-Link DIR-846 操作系统命令注入漏洞
A command execution vulnerability exists in the D-Link DIR-846, a wireless router from D-Link in Taiwan, China, which originates in the product HNAP1/control/SetNetworkTomographySettings.php file. The vulnerability is caused by the fact that the HNAP1/control/SetNetworkTomographySettings.php file...
snapd 安全漏洞
Snapd is an open source, cross-platform package management tool. A security vulnerability exists in snapd 2.54.2 and earlier versions, which stems from the software creating the snap directory in a user's home directory without specifying owner-only permissions. This may allow a local attacker to...
Sensitive data stored in plain text by support-core
support-core has a feature to redact potentially sensitive information in the support bundle. support-core 2.79 and earlier does not redact some sensitive information in the support bundle. This sensitive information can be viewed by anyone with access to the bundle. support-core 2.79.1 adds a li...