CVE-2022-25575

Multiple cross-site scripting XSS vulnerabilities in Parking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the user name, password, and verification code text boxes...

Exploit for Improper Initialization in Linux Linux_Kernel

What is this This is Max Kellermann's proof of concept for Di...

Exploit for Improper Initialization in Linux Linux_Kernel

What is this This is Max Kellermann's proof of concept for Di...

CVE-2022-24610

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...

CVE-2022-24610

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...

Default credentials

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...

CVE-2022-0512

An authorization bypass vulnerability was found in nodes-url-parse. This flaw allows a remote attacker with a basic user account to evade hostname verification by inserting the at symbol "@" at the end of the password field. This issue can allow entry to systems designed to block remote access an...

CVE-2021-46558

Multiple cross-site scripting XSS vulnerabilities in the Add User module of Issabel PBX 20200102 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the username and password fields...

Business Logic Errors

publifycore is vulnerable to business logic errors. The vulnerability exists in updateparams function of contentcontroller.rb because the password field present in the form is not accepted by the controller which allows an attacker to exploit this flaw since the article is always public...

CVE-2021-41659

SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username or password field...

CVE-2021-41659

SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username or password field...

Banking System SQL注入漏洞

Banking System is a simple banking system project by Carlo Montero's personal developer. It is used to manage bank customers' accounts and process basic customer transactions. A security vulnerability exists in Banking System that originates from allowing arbitrary SQL commands to be executed via...

PT-2022-11456

Name of the Vulnerable Software and Affected Versions Sourcecodester Banking System version 1 Description The issue allows attackers to execute arbitrary SQL commands via the username or password field, potentially leading to unauthorized access or data manipulation. Recommendations For...

CVE-2021-44600

The password parameter on Simple Online Mens Salon Management System MSMS 1.0 appears to be vulnerable to SQL injection attacks through the password parameter. The predictive tests of this application interacted with that domain, indicating that the injected SQL query was executed. The attacker c...

CVE-2020-23679

Buffer overflow vulnerability in Renleilei1992 LinuxNetworkProject 1.0, allows attackers to execute arbitrary code, via the password field...

CVE-2020-23679

Buffer overflow vulnerability in Renleilei1992 LinuxNetworkProject 1.0, allows attackers to execute arbitrary code, via the password field...

Buffer overflow

Buffer overflow vulnerability in Renleilei1992 LinuxNetworkProject 1.0, allows attackers to execute arbitrary code, via the password field...

CVE-2020-23679

Buffer overflow vulnerability in Renleilei1992 LinuxNetworkProject 1.0, allows attackers to execute arbitrary code, via the password field...

Linux Network Project 缓冲区错误漏洞

Linux Network Project is an open source remote terminal management system that uses C in combination with Linux features for socket programming. Linux Network Project has a buffer error vulnerability in version 1.0, which stems from the product's password field failing to properly control memory...

CVE-2021-41314

Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication scheme - allows the attacker to create or overwrite a file with specific content e.g., the "2" string. This leads to admin session crafting and...