PT-2023-31315

Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 2.1.2 Apache Superset versions 3.0.0 through 3.0.1 Description A where in JINJA macro allows users to specify a quote, which combined with a carefully crafted statement would allow for SQL injection in Apache...

XWiki Platform Security Vulnerability

XWiki Platform is the XWiki Foundation's suite of Wiki platforms for creating collaborative Web applications. A security vulnerability exists in XWiki Platform that stems from a failure of the search management interface to properly escape the id and label of a search user interface extension,...

CVE-2023-6648

A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. It is possible to initiate the attack...

PT-2023-26326 · Unknown · Superwebmailer

Name of the Vulnerable Software and Affected Versions: SuperWebMailer version 9.00.0.01710 Description: The issue allows for Export SQL Injection via the size parameter. This enables potential attackers to inject malicious SQL code, potentially leading to unauthorized data access or modification...

GitPython: Insecure non-multi options in clone and clone_from is not blocked

An improper input validation vulnerability was found in GitPython. This flaw allows an attacker to inject a maliciously crafted remote URL into the clone command, possibly leading to remote code execution...

PT-2023-27693 · Widestand · Widestand

Name of the Vulnerable Software and Affected Versions: WideStand versions prior to 5.3.5 Description: The issue is a Cross-site Scripting XSS reflected vulnerability. It generates one of the meta tags directly using the content of the queried URL, allowing an attacker to inject HTML/Javascript co...

DEBIAN-CVE-2023-36479

Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, th...

The vulnerability of the ajax_hosts() and ajax_hosts_noany() functions (graphs.php) of the Cacti network monitoring tool allows a hacker to execute arbitrary SQL queries.

The vulnerability of the ajaxhosts and ajaxhostsnoany functions graphs.php of the Cacti network monitoring tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using a specially...

Postgresql: extension script @substitutions@ within quoting allow sql injection

...

UBUNTU-CVE-2023-39950

efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets. Insufficient or missing validation and sanitization of input from untrustworthy bootloader environment files can cause crashes and probably also code injections into bgsetenv or...

PT-2023-20636 · Ox Software Gmbh +1 · Ox App Suite +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue concerns a full-text autocomplete search that allows user-provided SQL syntax to be injected into SQL statements. Despite existing sanitization, this can be exploited to trigger...

PT-2023-25700 · Contao · Contao

Name of the Vulnerable Software and Affected Versions: Contao versions 4.0.0 through 4.9.41 Contao versions 4.13.0 through 4.13.27 Contao versions 5.0.0 through 5.1.9 Description: Contao is an open source content management system. It is possible for untrusted backend users to inject malicious co...

PT-2023-26480 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /classes/Master.php?f=delete category of the component HTTP POST Request...

golang: html/template: improper handling of empty HTML attributes

A flaw was found in golang. Templates containing actions in unquoted HTML attributes, for example, "attr=." executed with empty input, could result in output that has unexpected results when parsed due to HTML normalization rules. This issue may allow the injection of arbitrary attributes into ta...

PT-2023-3437 · WordPress · Active Directory Integration / Ldap Integration

Name of the Vulnerable Software and Affected Versions: Active Directory Integration / LDAP Integration plugin for WordPress versions up to, and including, 4.1.5 Description: The issue is related to insufficient escaping on the supplied username value, which makes it possible for unauthenticated...

PT-2023-3117 · Pro Face +1 · Pro-Face Blue +1

Name of the Vulnerable Software and Affected Versions: Schneider Electric EcoStruxure Operator Terminal Expert affected versions not specified Pro-face BLUE affected versions not specified Description: A code injection vulnerability exists, potentially allowing the execution of malicious code whe...

Credence Analytics iDEAL Wealth and Funds SQL注入漏洞

Credence Analytics iDEAL Wealth and Funds is a one-stop solution for funds from Credence Analytics India. A security vulnerability exists in Credence Analytics iDEAL Wealth and Funds version 1.0. An attacker can exploit the vulnerability to inject a payload via the "v" parameter, which can lead t...

CVE-2023-24539

Angle brackets are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input...

PT-2023-19169 · WordPress · Joel James Lazy Social Comments

Name of the Vulnerable Software and Affected Versions: Joel James Lazy Social Comments plugin versions = 2.0.4 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scripts into the...

PT-2023-16236 · WordPress · The Random Text Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Random Text WordPress plugin versions through 0.3.0 Description: The issue is related to a SQL injection that occurs because a parameter is not properly sanitized and escaped before being used in a SQL statement. This can be exploited by...