Cisco Identity Services Engine 路径遍历漏洞

Cisco Identity Services Engine is an environment-aware platform from Cisco USA. A path traversal vulnerability exists in Cisco Identity Services Engine, which stems from insufficient filtering and validation of user-supplied parameters in API requests. An attacker could exploit this vulnerability...

Cisco Identity Services Engine 路径遍历漏洞

Cisco Identity Services Engine Cisco ISE is an environment-aware platform ISE Identity Services Engine from Cisco USA. The platform collects real-time information from the network, users, and devices to develop and enforce policies to regulate the network. The Cisco Identity Services Engine has a...

SmartAgent 1.1.0 SQL Injection Vulnerability

Exploit Title: SmartAgent v1.1.0 - Unauthenticated SQL Injection SQLi Exploit Author: Alter Prime Vendor Homepage: https://smarts-srlcom.com/, https://smartagent.com Version: Build v1.1.0 Tested on: Kali Linux An unauthenticated user can inject SQL queries through a POST request to the vulnerable...

CVE-2024-50998

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpnserviceport and openvpnserviceporttun parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-10841

A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. Affected by this vulnerability is an unknown functionality of the file /ProsesKirim.php of the component Mail Handler. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely...

CVE-2024-51520

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51519

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51519

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51520

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51520

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51520

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51520

CVE-2024-51520 corresponds to a vulnerability in Huawei HarmonyOS where the HDC module does not verify inbound input parameters. Affected component: HDC module within HarmonyOS. Root cause: lack of verification of input parameters, leading to potential availability impact. Impact: CVSS indicates ...

CVE-2024-51519

CVE-2024-51519 describes a vulnerability in Huawei HarmonyOS where the HDC module does not properly verify input parameters. Reported impact is potential denial of service affecting availability. Public details are limited; affected versions and a fix are not specified in the provided documents. ...

CVE-2024-51519

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51519

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

LocalAI Cross-site Scripting vulnerability

localai =2.20.1 is vulnerable to Cross Site Scripting XSS. When calling the delete model API and passing inappropriate parameters, it can cause a one-time storage XSS, which will trigger the payload when a user accesses the homepage...

PHPGurukul Hospital Management System 安全漏洞

Hospital Management System a PHP and MySQL based hospital management system. Hospital Management System has a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameters fromdate and todate in the...

PT-2024-8369 · NetGear · Netgear R8500

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue is related to multiple stack overflow vulnerabilities in the ipv6 fix.cgi component of the Netgear R8500 router. These vulnerabilities are caused by the lack of size checking for input da...

CVE-2024-38407

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

Codezips Pet Shop Management System 安全漏洞

Codezips Pet Shop Management System is an open source pet store management system from Codezips. A security vulnerability exists in Codezips Pet Shop Management System version 1.0, which is caused by a SQL injection in the parameter id or name...