Lucene search
K

864 matches found

CNNVD
CNNVD
added 2024/08/18 12:0 a.m.5 views

itsourcecode Insurance Management System 跨站脚本漏洞

itsourcecode Insurance Management System is an insurance management system from itsourcecode open source. A cross-site scripting vulnerability exists in version 1.0 of itsourcecode Insurance Management System, which stems from an unknown function in the file addNominee.php on the Add Nominee page...

5.4CVSS4.5AI score0.0014EPSS
Exploits1References4
Packet Storm
Packet Storm
added 2024/08/16 12:0 a.m.232 views

Insurance 1.2 Insecure Settings

==================================================================================================================================== | Title : Insurance 1.2 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits | | Vend...

7.4AI score
Exploits0
Schneier on Security
Schneier on Security
added 2024/08/14 4:48 p.m.11 views

Texas Sues GM for Collecting Driving Data without Consent

Texas is suing General Motors for collecting driver data without consent and then selling it to insurance companies: From CNN: In car models from 2015 and later, the Detroit-based car manufacturer allegedly used technology to "collect, record, analyze, and transmit highly detailed driving data...

7AI score
Exploits0
Hacker One
Hacker One
added 2024/07/31 8:43 p.m.7 views

MTN Group: OTP code Leaked in API Response

The application allowed users to sign up for device insurance. When getting a quote, an OTP code was sent to the user's phone number for authentication, but the same OTP code was also returned in the API response...

7.1AI score
Exploits0
OSV
OSV
added 2024/07/30 9:15 a.m.1 views

CVE-2024-7225

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...

5.4CVSS3.8AI score0.00096EPSS
Exploits1References4
NVD
NVD
added 2024/07/30 9:15 a.m.11 views

CVE-2024-7225

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...

5.4CVSS0.00096EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/07/30 8:31 a.m.9 views

CVE-2024-7225 SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...

5.3CVSS6.2AI score0.00096EPSS
Exploits1References4
CVE
CVE
added 2024/07/30 8:31 a.m.52 views

CVE-2024-7225

SourceCodester Insurance Management System 1.0 contains a cross-site scripting (XSS) vulnerability in the Edit Insurance Policy Page, specifically via the pname parameter of /Script/admin/core/update_policy. The issue is exploitable remotely and is triggered by input handling on that page; multip...

5.4CVSS3.9AI score0.00096EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/07/30 12:0 a.m.3 views

Insurance Management System 跨站脚本漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A cross-site scripting vulnerability exists in Insurance Management System version 1.0, which stems from the parameter pname in the file /Script/admin/core/updatepolicy that result...

5.4CVSS4.4AI score0.00096EPSS
Exploits1References5
Malwarebytes
Malwarebytes
added 2024/07/29 3:24 p.m.8 views

US senators ask FTC to investigate car makers’ privacy practices

An ongoing US Senate investigation indicated that connected car makers violate consumer privacy by sharing and selling drivers’ data, including their location, on a vast scale, and that the same car makers often obtain consumer consent through deception. Based on this investigation, senators have...

7AI score
Exploits0
NVD
NVD
added 2024/07/24 8:15 p.m.14 views

CVE-2024-7080

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /E-Insurance/. The manipulation leads to direct request. The attack can be launched remotely. The exploit has be...

7.5CVSS0.0049EPSS
Exploits1References4
OSV
OSV
added 2024/07/24 8:15 p.m.1 views

CVE-2024-7080

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /E-Insurance/. The manipulation leads to direct request. The attack can be launched remotely. The exploit has be...

7.5CVSS4.8AI score0.0049EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/07/24 8:0 p.m.13 views

CVE-2024-7080 SourceCodester Insurance Management System direct request

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /E-Insurance/. The manipulation leads to direct request. The attack can be launched remotely. The exploit has be...

6.9CVSS6.9AI score0.0049EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/07/24 8:0 p.m.15 views

CVE-2024-7080 SourceCodester Insurance Management System direct request

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /E-Insurance/. The manipulation leads to direct request. The attack can be launched remotely. The exploit has be...

6.9CVSS0.0049EPSS
Exploits1References4
CVE
CVE
added 2024/07/24 8:0 p.m.49 views

CVE-2024-7080

CVE-2024-7080 affects SourceCodester Insurance Management System 1.0. The vulnerability resides in an unknown function of the file /E-Insurance/, allowing a remote attacker to trigger a direct request. Exploit details have been disclosed publicly (VDB-272365). NVD CVSS3.1 base score is 7.5 (HIGH)...

7.5CVSS5.4AI score0.0049EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2024/07/24 3:15 p.m.12 views

CVE-2024-7068

A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/updatesubcategory. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

5.3CVSS0.0014EPSS
Exploits1References4
OSV
OSV
added 2024/07/24 3:15 p.m.2 views

CVE-2024-7068

A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/updatesubcategory. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

4.6CVSS3.9AI score0.0014EPSS
Exploits1References4
CVE
CVE
added 2024/07/24 3:0 p.m.50 views

CVE-2024-7068

CVE-2024-7068 affects SourceCodester Insurance Management System 1.0. The vulnerability exists in an unknown part of the file /Script/admin/core/update_sub_category where manipulating the name parameter enables cross-site scripting. Remote exploitation is possible and the exploit has been disclos...

5.3CVSS3.8AI score0.0014EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/24 3:0 p.m.17 views

CVE-2024-7068 SourceCodester Insurance Management System update_sub_category cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/updatesubcategory. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

5.3CVSS6.2AI score0.0014EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/07/24 12:0 a.m.1 views

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in Insurance Management System version 1.0. An attacker could exploit the vulnerability to gain access to sensitive information...

7.5CVSS5.6AI score0.0049EPSS
Exploits1References5
Rows per page
Query Builder