1459 matches found
CVE-2024-48284
A Reflected Cross-Site Scripting XSS vulnerability was found in the /search-result.php page of the PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary scripts via the searchkey parameter in a POST HTTP request...
PT-2024-33070 · Unknown · Phpgurukul User Registration & Login/User Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System version 3.2 Description: A Reflected Cross-Site Scripting XSS issue was discovered in the "/search-result.php" page, allowing remote attackers to execute arbitrary scripts via th...
kernel: nvmet: always initialize cqe.result
In the Linux kernel, the following vulnerability has been resolved: nvmet: always initialize cqe.result The spec doesn't mandate that the first two double words aka results for the command queue entry need to be set to 0 when they are not used not specified. Though, the target implemention return...
kernel: can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()
In the Linux kernel, the following vulnerability has been resolved: can: isotp: isotpsendmsg: add result check for waiteventinterruptible Using waiteventinterruptible to wait for complete transmission, but do not check the result of waiteventinterruptible which can be interrupted. It will result ...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the blocktypegetresulttypes function. Remediation Upgrade wasm-micro-runtime to version 2.2.0 or higher. References - GitHub Commit - GitHub Gist - GitHub Issue Credit: Ziyi Guo...
CVE-2024-10995
A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /removeDoctorResult.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploi...
CVE-2024-10991
A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /editBranchResult.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploi...
PT-2024-21938 · Unknown · Wasm-Micro-Runtime
Name of the Vulnerable Software and Affected Versions: wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR version 06df58f Description: The issue is related to a NULL Pointer Dereference in the function block type get result types. This indicates a problem where the code attempts to access...
Codezips Hospital Appointment System 注入漏洞
Codezips Hospital Appointment System is an open source hospital appointment system from Codezips. An injection vulnerability exists in Codezips Hospital Appointment System version 1.0, which stems from the parameter ID of the file /editBranchResult.php that can cause SQL injection...
CVE-2024-27532
wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...
CVE-2024-50102
CVE-2024-50102 : The connected advisories indicate a Linux kernel x86 issue where using the high address bit to classify user vs. kernel space enabled a speculative-execution leak for non-canonical addresses. The root cause involves non-canonical address handling and an evolving AC/bit behavior a...
CVE-2024-10607
A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit...
Courier Management System track-result.php file SQL Injection Vulnerability
Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that stems from improper handling of the Consignment parameter in the file /track-result.php. An attacker could exploit this vulnerability to cause data disclosure or...
Code-Projects Courier Management System 安全漏洞
Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that stems from improper handling of the Consignment parameter in the file /track-result.php. An attacker could exploit this vulnerability to cause data disclosure or...
CVE-2024-48283
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter...
CVE-2024-48279
A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary HTML code via the searchkey parameter in a POST HTTP request...
CVE-2024-48280
A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parameter in a POST HTTP request...
PT-2024-33069 · Unknown · Phpgurukul User Registration & Login/User Management System
Name of the Vulnerable Software and Affected Versions: Phpgurukul User Registration & Login and User Management System version 3.2 Description: The issue is related to SQL Injection in the /admin//search-result.php endpoint via the searchkey parameter. This allows for potential exploitation. No...
PT-2024-33067 · Unknown · Phpgurukul User Registration & Login/User Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System version 3.2 Description: A SQL Injection issue was found in the /search-result.php file, allowing remote attackers to execute arbitrary SQL commands via the fromdate parameter in...
