5201 matches found
CVE-2022-32061
An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-32061: Improper Neutralization of Input During Web Page Generation
An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...
PT-2022-21084
Name of the Vulnerable Software and Affected Versions Snipe-IT version 6.0.2 Description The issue allows attackers to execute arbitrary code via a crafted file, exploiting an arbitrary file upload vulnerability in the Select User function under the People Menu component. Recommendations For...
PT-2022-15900
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description This issue affects users who are not allowed to access certain functionality via the web interface. An attacker must first access the "Login menu - demo...
CVE-2021-40956
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...
CVE-2021-40956
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...
CVE-2021-40956
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...
Sql injection
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...
CVE-2021-40956
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...
CVE-2021-40956
CVE-2021-40956 affects LaiKetui v3.5.0, with SQL injection via the menu management function in the background that can expose sensitive data. This corresponds to multiple sources confirming SQL injection in LaikeTui v3.5.0. No explicit exploitation details or patched version are provided in the c...
CVE-2021-40956
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...
Malicious Package
Overview @xunlie/vue-context-menu is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
LaikeTui SQL injection vulnerability
LaikeTui Laike e-commerce is a stable and small open source mall system for individual developers. A security vulnerability exists in LaikeTui v3.5.0. Attackers use this vulnerability through the menu management function in the background of the SQL injection attack , in order to obtain sensitive...
PT-2022-11346
Name of the Vulnerable Software and Affected Versions LaiKetui version 3.5.0 Description The issue concerns a SQL injection in the background of LaiKetui through the menu management function, allowing sensitive data to be obtained. Recommendations For LaiKetui version 3.5.0, as a temporary...
CVE-2021-40956: Improper Neutralization of Special Elements used in an SQL Command
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...
Malware in @tinkoff-react-bui/context-menu
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @tinkoff-react-bui/context-menu (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f239b4e149956ae7fcbe368e6040942fc96e8fd6a13a332a4c1e64cffb9747d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-32330
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...