CVE-2023-46295

An issue was discovered in Teledyne FLIR M300 2.00-19. Unauthenticated remote code execution can occur in the web server. An attacker can exploit this by sending a POST request to the vulnerable PHP page. An attacker can elevate to root permissions with Sudo...

CVE-2024-22546

TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the dosetNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request...

Improper Access Control

Postorius is vulnerable to Improper Access Control. The vulnerability is due to insufficient validation which allows any logged-in user to send a crafted POST request to unsubscribe any user from a mailing list as well as verify if the address was subscribed in the first place...

CVE-2024-22546

Affected product: TRENDnet TEW-815DAP, v1.0.2.0. Vulnerability: Command Injection via the do_setNTP function. Root cause / vector: An authenticated administrator can trigger a network-accessible command injection by sending a malicious POST request to the device. Impact (as stated): Potential for...

CVE-2024-22546

TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the dosetNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request...

The vulnerability of the fromAddressNat function (ip/goform/addressNat) in the microprogramming software for Tenda FH1206 allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the fromAddressNat function in the ip/goform/addressNat format in the microprogrammed software for Tenda FH1206 is related to buffer overflows in the stack during the processing of the mitInterface parameter. Exploiting this vulnerability can allow an attacker to cause servic...

The vulnerability of the fromAddressNat function (ip/goform/addressNat) in the microprogrammable routing device Tenda FH1206 allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the fromAddressNat function in the ip/goform/addressNat format in the microprogrammed routing software Tenda FH1206 is related to buffer overflows in the stack during the processing of the page parameter. Exploiting this vulnerability can allow an attacker to cause service...

CVE-2024-28320

Insecure Direct Object References IDOR vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php...

CVE-2024-28320

Insecure Direct Object References IDOR vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php...

CVE-2024-33449

An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter...

CVE-2024-33449

An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter...

CVE-2024-28320

CVE-2024-28320 affects Hospital Management System version 1.0. The vulnerability is an Insecure Direct Object Reference (IDOR) in the /patient/edit-user.php endpoint, enabling an attacker to manipulate user parameters to gain unauthorized access and perform modifications. The NVD entry lists CVSS...

CVE-2024-33449

An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter...

CVE-2024-22633

Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request...

CVE-2024-22632

CVE-2024-22632 affects Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388. Affects the hmsg parameter (and related CVEs show hprinter), enabling remote code execution via a crafted POST request. Documented impact is remote code execution with high/severe potential, triggered ove...

CVE-2024-31502

CVE-2024-31502 affects Insurance Management System v1.0.0 and earlier. The issue is a permissions problem in the /admin/core/new_staff endpoint that allows a remote attacker to escalate privileges via a crafted POST request. The CVE entry provides a high-severity score (CVSS 3.1: AV:N/AC:L/PR:L/U...

CVE-2024-31502

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/newstaff...

CVE-2024-28322

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the eventid parameter in a crafted POST request...

CVE-2024-22633

Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request...

CVE-2024-31502

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/newstaff...