Lucene search
+L

6786 matches found

CVE
CVE
added 2022/10/13 12:00 a.m.78 views

CVE-2022-3492

CVE-2022-3492 concerns SourceCodester Human Resource Management System 1.0, specifically the Profile Photo Handler component. The core issue is the manipulation of an argument parameter that enables an OS command injection, with a remote attack surface. Several connected sources reiterate the vul...

8.8CVSS8AI score0.0098EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/13 12:00 a.m.13 views

PT-2022-22435 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: A critical issue was found in the Profile Photo Handler component, where manipulation of the argument parameter leads to os command injection. This issue can be initiate...

8.8CVSS8.8AI score0.0098EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/10/12 12:00 a.m.72 views

Web-Based Student Clearance System File Upload Vulnerability

Web-Based Student Clearance System is a web-based student clearance system from the personal developer Ndueso Okorie. v1.0 of Web-Based Student Clearance System is vulnerable to a file upload vulnerability that originates from a method in the edit-photo.php file in the Photo Handler component tha...

7.5CVSS2.4AI score0.00543EPSS
SaveExploits4References1
ATTACKERKB
ATTACKERKB
added 2022/10/09 9:15 a.m.4 views

CVE-2022-3436

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launche...

7.5CVSS6.6AI score0.00543EPSS
SaveExploits4References3Affected Software1
NVD
NVD
added 2022/10/09 9:15 a.m.44 views

CVE-2022-3436

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launche...

7.5CVSS0.00543EPSS
SaveExploits4References2
OSV
OSV
added 2022/10/09 9:15 a.m.10 views

CVE-2022-3436

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launche...

7.5CVSS5.5AI score0.00543EPSS
SaveExploits4References2
Cvelist
Cvelist
added 2022/10/09 12:00 a.m.54 views

CVE-2022-3436 SourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launche...

6.3CVSS7.8AI score0.00543EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2022/10/09 12:00 a.m.14 views

Web-Based Student Clearance System 代码问题漏洞

Web-Based Student Clearance System is a web-based student clearance system from the personal developer Ndueso Okorie. v1.0 of Web-Based Student Clearance System is vulnerable to a file upload vulnerability that originates from a method in the edit-photo.php file in the Photo Handler component tha...

7.5CVSS7.4AI score0.00543EPSS
SaveExploits4References3
Positive Technologies
Positive Technologies
added 2022/10/09 12:00 a.m.8 views

PT-2022-22144 · Sourcecodester · Sourcecodester Web-Based Student Clearance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-Based Student Clearance System version 1.0 Description: A critical issue was found in the Photo Handler component, specifically in the file edit-photo.php, allowing for unrestricted upload. This can be exploited remotely...

7.5CVSS7.4AI score0.00543EPSS
SaveExploits4References5
The Hacker News
The Hacker News
added 2022/10/07 1:52 p.m.58 views

Facebook Detects 400 Android and iOS Apps Stealing Users Log-in Credentials

Meta Platforms on Friday disclosed that it had identified over 400 malicious apps on Android and iOS that it said targeted online users with the goal of stealing their Facebook login information. "These apps were listed on the Google Play Store and Apple's App Store and disguised as photo editors...

1.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/10/04 12:00 a.m.18 views

Photo Gallery Plugin for WordPress < 1.6.4 Cross-Site Scripting

The WordPress Photo Gallery Plugin installed on the remote host is affected by a stored Cross-Site Scripting XSS. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

4.8CVSS6.6AI score0.01036EPSS
SaveExploits2References2
Fedora
Fedora
added 2022/09/22 1:25 a.m.49 views

[SECURITY] Fedora 35 Update: ImageMagick-6.9.12.63-1.fc35

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

3.3CVSS0.8AI score0.00475EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2022/09/20 12:00 a.m.1 views

CVE-2022-32872

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A person with physical access to an iOS device may be able to access photos from the lock screen...

2.5AI score0.00378EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/09/20 12:00 a.m.88 views

QNAP Photo Station DeadBolt Ransomware (QSA-22-24)

The version of Photo Station running on the remote QNAP NAS is affected by a vulnerability. An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. Note that Nessu...

10CVSS8.2AI score0.87908EPSS
SaveExploits0References2
Check Point Advisories
Check Point Advisories
added 2022/09/18 12:00 a.m.53 views

QNAP NAS Photo Station Arbitrary File Write (CVE-2022-27593)

An arbitrary file write vulnerability exists in QNAP NAS Photo Station. Successful exploitation of this vulnerability could result in code execution on the affected system...

3.1AI score0.87908EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2022/09/16 3:08 a.m.38 views

Uber Says It's Investigating a Potential Breach of Its Computer Systems

Ride hailing giant Uber disclosed Thursday it's responding to a cybersecurity incident involving a breach of its network and that it's in touch with law enforcement authorities. The New York Times first reported the incident. The company pointed to its tweeted statement when asked for comment on...

0.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2022/09/15 2:10 a.m.15 views

photo-aerienne-france.fr Cross Site Scripting vulnerability OBB-2921508

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/09/15 12:00 a.m.28 views

Fedora: Security Advisory for ImageMagick (FEDORA-2022-776925f086)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

3.3CVSS4.3AI score0.00475EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/09/13 7:15 p.m.253 views

CVE-2022-26928

Windows Photo Import API Elevation of Privilege Vulnerability...

7CVSS7.1AI score0.00794EPSS
SaveIn wildExploits0References3Affected Software13
OSV
OSV
added 2022/09/13 7:15 p.m.6 views

CVE-2022-26928

Windows Photo Import API Elevation of Privilege Vulnerability...

7CVSS7.3AI score0.00794EPSS
SaveExploits0References1
Rows per page
Query Builder