11927 matches found
WordPress Simple User Registration plugin <= 5.5 - Broken Access Control on User Deletion vulnerability
Broken Access Control on User Deletion vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Simple User Registration versions = 5.5...
The vulnerability of the Docker-based registration system for incoming goods, which allows attackers to enhance their privileges.
The vulnerability of the Docker-based registration system for incoming goods involves deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of SAP NetWeaver Java software update, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SAP NetWeaver Java software update manager is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
CVE-2024-11599
CVE-2024-11599 affects Mattermost where input-based email validation failure allows an unauthenticated user to bypass email domain restrictions during registration. Affected versions include 9.5.x (<= 9.5.11), 9.11.x (<= 9.11.3), 10.0.x (<= 10.0.1), and 10.1.x (9.5.11, >9.11.3, >10...
CVE-2024-11599 Domain Restriction Bypass on Registration
Mattermost versions 10.0.x = 10.0.1, 10.1.x = 10.1.1, 9.11.x = 9.11.3, 9.5.x = 9.5.11 fail to properly validate email addresses which allows an unauthenticated user to bypass email domain restrictions via carefully crafted input on email registration...
CVE-2024-11599 Domain Restriction Bypass on Registration
Mattermost versions 10.0.x = 10.0.1, 10.1.x = 10.1.1, 9.11.x = 9.11.3, 9.5.x = 9.5.11 fail to properly validate email addresses which allows an unauthenticated user to bypass email domain restrictions via carefully crafted input on email registration...
CVE-2024-11599 Domain Restriction Bypass on Registration
Mattermost versions 10.0.x = 10.0.1, 10.1.x = 10.1.1, 9.11.x = 9.11.3, 9.5.x = 9.5.11 fail to properly validate email addresses which allows an unauthenticated user to bypass email domain restrictions via carefully crafted input on email registration...
CVE-2024-11818
A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-11818
CVE-2024-11818 affects PHPGurukul User Registration & Login and User Management System 1.0. The vulnerability is in /signup.php where manipulating the email parameter causes SQL injection. It is exploitable remotely and has been disclosed publicly. Connected sources also note a recommended tempor...
CVE-2024-11817
A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be...
CVE-2024-11817 PHPGurukul User Registration & Login and User Management System index.php sql injection
A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be...
CVE-2024-11817
The CVE-2024-11817 entry concerns PHPGurukul User Registration & Login and User Management System v1.0. It specifies a vulnerability in the /admin/index.php file where manipulation of the username parameter enables SQL injection. The attack can be launched remotely and the exploit has been disclo...
CVE-2024-11817 PHPGurukul User Registration & Login and User Management System index.php sql injection
A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be...
CVE-2024-53674
creationtimestamp| type| source ---|---|--- 2024-11-26 21:57:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113551489306259197 2024-12-02 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1637/...
kernel: media: edia: dvbdev: fix a use-after-free
In the Linux kernel, the following vulnerability has been resolved: media: edia: dvbdev: fix a use-after-free In dvbregisterdevice, pdvbdev is set equal to dvbdev, which is freed in several error-handling paths. However, pdvbdev is not set to NULL after dvbdev's deallocation, causing...
CVE-2024-11678
CodeAstro Hospital Management System 1.0 is affected by a cross-site scripting vulnerability in /backend/doc/his_doc_register_patient.php. The issue arises from manipulating the parameters pat_fname, pat_ailment, pat_lname, pat_age, pat_dob, pat_number, pat_phone, pat_type, and pat_addr, allowing...
Drupal 7.x < 7.102 Multiple Vulnerabilities
According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. - Drupal core...
Drupal 11.0.x < 11.0.8 Multiple Vulnerabilities
According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. - Drupal core...
PT-2024-17272 · Unknown · Phpgurukul User Registration & Login/User Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown part of the file /signup.php. The manipulation of the email argument leads to...
WordPress CM Email Registration Blacklist and Whitelist plugin <= 1.5.3 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin CM Email Registration Blacklist and Whitelist versions = 1.5.3...