CVE-2024-40502

CVE-2024-40502 affects Hospital Management System Project in ASP.Net MVC 1. The vulnerability is an SQL injection in the btn_login_b_Click function of Loginpage.aspx, caused by concatenating user inputs (txt_login_username.Text and txt_login_pass.Text) into an SQL query without proper parameteriz...

CVE-2024-40502

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...

Hospital Management System Project In ASP.Net MVC 1 SQL Injection Vulnerability

Hospital Management System Project in ASP.Net MVC version 1 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: Hospital Management System Project in ASP.Net MVC - SQL Injection / Authentication Bypass Date: 07/16/2024 Exploit Author: 0xMykull...

Malicious code in Be.Vlaanderen.Basisregistеrs.AspNetCore.Mvс.Middleware.DefaultResponseCompressіоnQuality (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4097 Malicious code in Be.Vlaanderen.Bаsisregisters.AspNetCorе.Mvc.Formatters.Json (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4185 Malicious code in Be.Vlaanԁeren.Basisregisters.AspNetCore.Mvc.Middleware.AddCorrelatioոIdToResponse (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaaոderen.Basisregіstеrs.AspNetCore.Mvc.Lоgging (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaаnԁeren.Basisregisters.AspNetCorе.Mvc.Middleware.AddCorrelatioոIdToResponse (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4289 Malicious code in Be.Vlаanderen.Basisrеgisters.AspNetCоre.Mvc.Middlewаre.AddCorrelationIdToLogContext (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bem-mvc-direct (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1820 Malicious code in bem-mvc-direct (npm)

--- -= Per source details. Do not edit below this line.=-...

Zend-Feed URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

GHSA-JMMP-VH96-78RM Zend-Feed URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

Zend-HTTP URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

GHSA-CG8W-5JRC-675G Zend-HTTP URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

ZendFramework Route Parameter Injection Via Query String in `Zend\Mvc`

In Zend Framework 2, Zend\Mvc\Router\Http\Query is used primarily to allow appending query strings to URLs when assembled. However, due to the fact that it captures any query parameters into the RouteMatch, and the fact that RouteMatch parameters are merged with any parent routes, this can lead t...

Spring Tips: Spring Cloud Gateway for Spring MVC

Hi, Spring fans! In this installment, we revisit Spring Cloud Gateway, this time to look at the fantastic new support for Spring MVC, made all the more amazing by Java 21's virtual threads...

[SECURITY] Fedora 40 Update: velocity-2.3-5.fc40

Velocity is a Java-based template engine. It permits anyone to use the simple yet powerful template language to reference objects defined in Java code. When Velocity is used for web development, Web designers can work in parallel with Java programmers to develop web sites according to the...

BIT-TYPO3-2021-21355

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1, due to the lack of ensuring file extensions belong to configured allowed mime-types, attackers can upload arbitrary data with arbitrary file extensions - however, default...

Security Bulletin: IBM Cognos Command Center has addressed vulnerabilities IBM® Semeru Java™ Version 11, Apache ActiveMQ and Microsoft .Net MVC Framework for ASP.Net

Summary There are vulnerabilities in IBM® Semeru Java™ Version 11, Apache ActiveMQ and Microsoft .Net MVC Framework for ASP.Net used by IBM Cognos Command Center. IBM Cognos Command Center 10.2.5 IF1 has addressed the applicable CVEs by upgrading to non-vulnerable versions of these libraries...