Lucene search
+L

20587 matches found

CNNVD
CNNVD
added 2023/04/09 12:00 a.m.11 views

Bank Locker Management System SQL注入漏洞

Bank Locker Management System is a bank locker management system. A SQL injection vulnerability exists in PHPGurukul Bank Locker Management System version 1.0, which stems from a problem with the file recovery.php, where manipulation of the parameter uname/mobile can lead to sql injection...

9.1CVSS7.6AI score0.01019EPSS
SaveExploits1References4
HackRead
HackRead
added 2023/04/07 6:01 p.m.19 views

Targetoo’s Precision Targeting Vows to Transform Mobile Advertising

By Owais Sultan In todays fast-paced digital world, mobile advertising has become an essential tool for businesses looking to engage with… This is a post from HackRead.com Read the original post: Targetoos Precision Targeting Vows to Transform Mobile Advertising...

6.7AI score
SaveExploits0
CNNVD
CNNVD
added 2023/04/07 12:00 a.m.8 views

BP Monitoring Management System SQL注入漏洞

BP Monitoring Management System is a web-based application by the individual developer of phpgurukul. A SQL injection vulnerability exists in HPGurukul BP Monitoring Management System version 1.0. The vulnerability stems from a SQL injection vulnerability in the name/mobno parameter...

6.5CVSS5.5AI score0.00625EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/07 12:00 a.m.12 views

PT-2023-17331 · Unknown · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue was found in the User Profile Update Handler component, specifically in the file profile.php. The manipulation of the name and mobno arguments leads to SQL...

6.5CVSS5.7AI score0.00625EPSS
SaveExploits1References6
OSV
OSV
added 2023/04/06 6:15 p.m.15 views

CVE-2023-20655

In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203022; Issue ID: ALPS07203022...

7.8CVSS7.5AI score0.00086EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 1:15 p.m.8 views

CVE-2023-1908

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/categories/viewcategory.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. ...

9.8CVSS6.5AI score0.00737EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/06 12:00 a.m.8 views

Simple Mobile Comparison Website SQL注入漏洞

Simple Mobile Comparison Website is a mobile comparison website by Carlo Montero personal developer. It allows users to compare the specifications of smartphones. SourceCodester Simple Mobile Comparison Website version 1.0 suffers from a SQL injection vulnerability that stems from a problem in th...

9.8CVSS7.1AI score0.00737EPSS
SaveExploits1References4
OSV
OSV
added 2023/04/05 7:15 p.m.10 views

CVE-2023-28342

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API...

7.5CVSS7.1AI score0.78338EPSS
SaveExploits0References2
NVD
NVD
added 2023/04/05 7:15 p.m.32 views

CVE-2023-28342

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API...

7.5CVSS7.5AI score0.78338EPSS
SaveExploits0References2
Prion
Prion
added 2023/04/05 7:15 p.m.28 views

Authentication flaw

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API...

5CVSS7.5AI score0.78338EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/05 12:00 a.m.15 views

PT-2023-7423 · Zoho · Zoho Manageengine Admanager Plus +1

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus affected versions not specified Zoho ManageEngine ADSelfService Plus versions prior to 6218 Description: The issue is related to insufficient input validation in the DomainUserSSPLogonAuth method of the Zoho...

7.8CVSS7.3AI score0.78338EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2023/04/05 12:00 a.m.60 views

CVE-2023-28342

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API...

7.7AI score0.78338EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/04/05 12:00 a.m.11 views

CVE-2023-28342

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API...

6.8AI score0.78338EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/05 12:00 a.m.14 views

ZOHO ManageEngine ADSelfService Plus 安全漏洞

ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. A security vulnerability exists in ZOHO ManageEngine ADSelfService Plus prior to version 6218, which originated from a denial of...

7.5CVSS7.3AI score0.78338EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/05 12:00 a.m.11 views

Cisco Packet Data Network Gateway 安全漏洞

Cisco Packet Data Network Gateway is a key network function of Cisco's 4G mobile core network.PGW serves as an interface between the LTE network and other packet data networks. A security vulnerability exists in the Cisco Packet Data Network Gateway that arises from the Vector Packet Processor no...

7.5CVSS7.3AI score0.00866EPSS
SaveExploits0References3
Prion
Prion
added 2023/04/04 5:15 p.m.22 views

Hardcoded credentials

The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server MQTT server and the ability to remotely control garage door...

7.5CVSS9.5AI score0.00826EPSS
SaveExploits0References1Affected Software4
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/04/03 6:24 a.m.7 views

Malicious code in mobile-coin-block-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55fa1745bad5c1749dccb8fbb0dcfe3d2d1046ffe8df941579b0ad26de5713c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/04/03 6:24 a.m.12 views

MAL-2023-606 Malicious code in mobile-coin-block-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55fa1745bad5c1749dccb8fbb0dcfe3d2d1046ffe8df941579b0ad26de5713c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2023/04/02 7:15 a.m.8 views

CVE-2023-1792

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/fields/managefield.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS5.7AI score0.00726EPSS
SaveExploits1References3
NVD
NVD
added 2023/04/02 7:15 a.m.24 views

CVE-2023-1792

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/fields/managefield.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS7.3AI score0.00726EPSS
SaveExploits1References3
Rows per page
Query Builder