Lucene search
+L

7280 matches found

CNNVD
CNNVD
added 2024/09/02 12:00 a.m.10 views

Huachu Digital Easytest Online Test Platform 安全漏洞

Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version ver.24E01 and prior versions, which is caused by a SQL injection vulnerability in the download personal learning...

8.8CVSS7.9AI score0.00469EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/02 12:00 a.m.7 views

Huachu Digital Easytest Online Test Platform 安全漏洞

Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version ver.24E01 and prior versions, which is caused by a SQL injection vulnerability in the download class learning course...

9.8CVSS7.9AI score0.00487EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2024/09/02 12:00 a.m.248 views

eClass LMS 6.2.0 Shell Upload

==================================================================================================================================== | Title : eClass LMS v6.2.0 shell upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendo...

7.4AI score
SaveExploits0
OSV
OSV
added 2024/08/30 3:15 a.m.14 views

CVE-2024-8328

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks...

5.4CVSS6AI score0.00292EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/30 3:15 a.m.13 views

CVE-2024-8327

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary SQL commands to read, modify, and delete database contents...

8.8CVSS6AI score0.00671EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/30 3:15 a.m.40 views

CVE-2024-8327

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary SQL commands to read, modify, and delete database contents...

8.8CVSS0.00671EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/30 3:15 a.m.27 views

CVE-2024-8328

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks...

5.4CVSS0.00292EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/08/30 2:20 a.m.16 views

CVE-2024-8328 HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - Reflected XSS

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks...

5.4CVSS6.8AI score0.00292EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/30 2:20 a.m.64 views

CVE-2024-8328

CVE-2024-8328 affects the Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY. The vulnerability is a failure to properly validate a specific page parameter, enabling remote attackers with regular privileges to inject arbitrary JavaScript and perform a reflected cross-...

5.4CVSS5.6AI score0.00292EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/30 2:14 a.m.13 views

CVE-2024-8327 HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - SQL injection

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary SQL commands to read, modify, and delete database contents...

8.8CVSS7.9AI score0.00671EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/30 2:14 a.m.72 views

CVE-2024-8327

CVE-2024-8327 affects the Easy Test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY. The issue is an SQL injection caused by improper validation of a specific page parameter, enabling remote attackers with regular privileges (network access, no UI interaction) to read, modif...

8.8CVSS9.1AI score0.00671EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/08/30 2:14 a.m.35 views

CVE-2024-8327 HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - SQL injection

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary SQL commands to read, modify, and delete database contents...

8.8CVSS0.00671EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/08/29 12:00 a.m.14 views

PT-2024-38943 · Hwa Jiuh Digital Technology · Easy Test Online Learning/Testing Platform

Name of the Vulnerable Software and Affected Versions: Easy test Online Learning and Testing Platform affected versions not specified Description: The Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing...

5.4CVSS6.9AI score0.00292EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/08/29 12:00 a.m.9 views

HWA JIUH DIGITAL Easy test Online Learning and Testing Platform 跨站脚本漏洞

HWA JIUH DIGITAL Easy test Online Learning and Testing Platform is an Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL. A cross-site scripting vulnerability exists in HWA JIUH DIGITAL Easy test Online Learning and Testing Platform versions prior to 24A01, which stems from...

5.4CVSS6.3AI score0.00292EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/21 7:15 p.m.10 views

CVE-2024-41572

Learning with Texts LWT 2.0.3 is vulnerable to Cross Site Scripting XSS. The application has a specific function that does not filter special characters in URL parameters. Remote attackers can inject JavaScript code without authorization. Exploiting this vulnerability, attackers can steal user...

6.1CVSS5.9AI score0.00302EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/21 7:15 p.m.33 views

CVE-2024-41572

Learning with Texts LWT 2.0.3 is vulnerable to Cross Site Scripting XSS. The application has a specific function that does not filter special characters in URL parameters. Remote attackers can inject JavaScript code without authorization. Exploiting this vulnerability, attackers can steal user...

6.1CVSS0.00302EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/21 12:00 a.m.65 views

CVE-2024-41572

CVE-2024-41572 affects Learning with Texts (LWT) 2.0.3. The root cause is a function that does not filter special characters in URL parameters, enabling remote attackers to perform Cross Site Scripting (XSS). The vulnerability allows attackers to inject JavaScript, potentially stealing user crede...

6.1CVSS6.4AI score0.00302EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/21 12:00 a.m.9 views

Learning with Texts 安全漏洞

Learning with Texts LWT is a software application by the individual developer Jon Gauthier. It allows users to import text, read, save, view and test words and expressions in multiple languages. A security vulnerability exists in Learning with Texts version 2.0.3, which stems from not filtering...

6.1CVSS6.8AI score0.00302EPSS
SaveExploits0References3
Rapid7 Blog
Rapid7 Blog
added 2024/08/14 1:47 p.m.12 views

Black Hat USA 2024: Key Takeaways and Industry Trends

What a week! As Hacker Summer camp shifts into the rearview, it’s time to take a moment to reflect on the week, what we learned and the people we had the pleasure of meeting while out in Las Vegas. As is always the case at Black Hat 2024, the cybersecurity community was buzzing with the latest...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/08/14 12:00 a.m.17 views

The vulnerability of the Layer 2 Address Learning Daemon (L2ALD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a hacker to induce a service failure.

The vulnerability of the Layer 2 Address Learning Daemon L2ALD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure using specially...

6.5CVSS5.5AI score0.00246EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder