231 matches found
CVE-2023-41594
Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters...
CVE-2023-7188
A vulnerability classified as critical has been found in Shipping 100 Fahuo100 up to 1.1. Affected is an unknown function of the file member/login.php. The manipulation of the argument Mpwd leads to sql injection. The complexity of an attack is rather high. The exploitability is told to be...
CVE-2022-29272
In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing...
CVE-2025-4890
A vulnerability was found in code-projects Tourism Management System 1.0 and classified as critical. This issue affects the function LoginUser of the component Login User. The manipulation of the argument username/password leads to stack-based buffer overflow. Attacking locally is a requirement...
Bosch Rexroth ctrlX OS 安全漏洞
Bosch Rexroth ctrlX OS is a Linux-based real-time operating system from Bosch Rexroth, Germany, designed as an open control platform for industrial automation equipment. A security vulnerability exists in Bosch Rexroth ctrlX OS that stems from an improper login function that could lead to usernam...
CVE-2025-3728
A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed...
CVE-2025-3728 SourceCodester Simple Hotel Booking System login buffer overflow
A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed...
CVE-2025-3728 SourceCodester Simple Hotel Booking System login buffer overflow
A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed...
SourceCodester Simple Hotel Booking System 安全漏洞
SourceCodester Simple Hotel Booking System is a SourceCodester open source simple hotel booking system. A security vulnerability exists in SourceCodester Simple Hotel Booking System version 1.0, which is caused by a buffer overflow due to incorrect manipulation of the uname parameter in the Login...
PT-2025-16898 · Unknown · Sourcecodester Simple Hotel Booking System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Hotel Booking System version 1.0 Description: A critical vulnerability was found in the Login function, where the manipulation of the uname argument leads to a buffer overflow. This issue can be exploited on the local...
CVE-2025-3139
A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical. Affected by this issue is the function Login of the component Login Form. The manipulation of the argument Str1 leads to buffer overflow. It is possible to launch the attack on the local host. The...
PT-2025-14576 · Unknown · Code-Projects Bus Reservation System
Name of the Vulnerable Software and Affected Versions: code-projects Bus Reservation System version 1.0 Description: A critical issue was found in the Login function of the Login Form component. The manipulation of the Str1 argument leads to a buffer overflow. It is possible to launch the attack ...
PT-2025-16744
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A read buffer overflow was possible in the Linux kernel due to the ibmvnic driver printing hex dumps using string formatters. The issue occurred when the buffer size was not a multiple o...
CVE-2024-35099
TOTOLINK LR350 V9.3.5u.6698B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth...
PT-2025-6118 · Code Projects · Code-Projects Vehicle Parking Management System
Name of the Vulnerable Software and Affected Versions: code-projects Vehicle Parking Management System version 1.0 Description: A critical issue was found in the Authentication component, specifically affecting the login function. The manipulation of the username argument leads to a stack-based...
CVE-2022-2674
A vulnerability was found in SourceCodester Best Fee Management System. It has been rated as critical. Affected by this issue is the function login of the file adminclass.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has be...
CVE-2024-7933
A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been classified as critical. Affected is an unknown function of the file login1.php of the component Backend Login. The manipulation of the argument user leads to sql injection. It is possible to launch the...
CVE-2024-0799
An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...
PT-2024-35705 · Habitica · Habitica
Name of the Vulnerable Software and Affected Versions: Habitica versions prior to 5.28.5 Description: Habitica is an open-source habit-building program. The issue concerns reflected cross-site scripting vulnerabilities in the login and social media functions within RegisterLoginReset.vue, caused ...
CVE-2024-10371
A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used...