Lucene search
+L

1162 matches found

CNNVD
CNNVD
•added 2024/05/30 12:00 a.m.•12 views

Human Resource Management System security breach

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in SourceCodester Human Resource Management System version 1.0, which originates from a SQL injection vulnerability that allows an attacker to execute...

9.8CVSS8.7AI score0.00636EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/30 12:00 a.m.•5 views

CVE-2024-35469: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter...

9.8CVSS6.3AI score0.00636EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/30 12:00 a.m.•16 views

PT-2024-26510 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands via the password parameter in the /hrm/user/ API endpoint. Recommendations: For SourceCodester...

9.8CVSS8.6AI score0.00636EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/30 12:00 a.m.•3 views

CVE-2024-35468: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter...

5.4CVSS6.3AI score0.0035EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/30 12:00 a.m.•14 views

PT-2024-26509 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands via the password parameter in the "/hrm/index.php" API endpoint. Recommendations: For...

5.4CVSS8.2AI score0.0035EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/05/30 12:00 a.m.•18 views

TOTOLINK NR1800X Buffer Overflow Vulnerability (CNVD-2024-34380)

TOTOLINK NR1800X is a 5G NR indoor Wi-Fi and SIP CPE from China's TOTOLINK. designed to provide fast and easy deployment of NR fixed data services in homes and offices. A buffer overflow vulnerability exists in TOTOLINK NR1800X version v9.1.0u.6681B20230703, which stems from the password paramete...

8.8CVSS8.3AI score0.02523EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/05/28 3:15 p.m.•9 views

CVE-2024-35399

TOTOLINK CP900L v4.1.5cu.798B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

8.8CVSS6AI score0.00434EPSS
SaveExploits0References3
OSV
OSV
•added 2024/05/28 3:15 p.m.•9 views

CVE-2024-35399

TOTOLINK CP900L v4.1.5cu.798B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

8.8CVSS5.8AI score0.00434EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/28 2:43 p.m.•44 views

CVE-2024-35399

TOTOLINK CP900L v4.1.5cu.798B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

7.6AI score0.00434EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/28 2:43 p.m.•21 views

CVE-2024-35399

TOTOLINK CP900L v4.1.5cu.798B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

8AI score0.00434EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/28 12:00 a.m.•14 views

PT-2024-26478 · Totolink · Totolink Cp900L

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP900L version 4.1.5cu.798 B20221228 Description: A stack overflow issue was discovered in the loginAuth function via the password parameter. Recommendations: For TOTOLINK CP900L version 4.1.5cu.798 B20221228, avoid using the passwor...

8.8CVSS7.6AI score0.00434EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/28 12:00 a.m.•3 views

CVE-2024-35399: Stack-based Buffer Overflow

TOTOLINK CP900L v4.1.5cu.798B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

8.8CVSS5.8AI score0.00434EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/24 7:15 p.m.•22 views

CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

8.8CVSS7.6AI score0.02523EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/24 7:15 p.m.•14 views

CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

8.8CVSS5.8AI score0.02523EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/24 6:08 p.m.•19 views

CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

8AI score0.02523EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/24 6:08 p.m.•34 views

CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

7.6AI score0.02523EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/24 6:08 p.m.•95 views

CVE-2024-35388

The TOTOLINK NR1800X (version v9.1.0u.6681_B20230703 ) contains a stack-based buffer overflow vulnerability. The root cause is the urldecode function's failure to properly validate the input data length for the password parameter. This flaw allows an attacker to potentially execute arbitrary code...

8.8CVSS8AI score0.02523EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/05/24 12:00 a.m.•16 views

PT-2024-26474 · Totolink · Totolink Nr1800X

Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6681 B20230703 Description: A stack overflow issue was discovered via the password parameter in the urldecode function. Recommendations: For TOTOLINK NR1800X version 9.1.0u.6681 B20230703, consider restricting...

8.8CVSS8.6AI score0.02523EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/24 12:00 a.m.•4 views

CVE-2024-35388: Stack-based Buffer Overflow

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

8.8CVSS5.8AI score0.02523EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/24 12:00 a.m.•15 views

TOTOLINK NR1800X 安全漏洞

TOTOLINK NR1800X is a 5G NR indoor Wi-Fi and SIP CPE from China's TOTOLINK. designed to provide fast and easy deployment of NR fixed data services in homes and offices. A buffer overflow vulnerability exists in TOTOLINK NR1800X version v9.1.0u.6681B20230703, which stems from the password paramete...

8.8CVSS8.1AI score0.02523EPSS
SaveExploits0References3
Rows per page
Query Builder