11764 matches found
HealthNode Hospital Management System 安全漏洞
HealthNode Hospital Management System is a hospital management system. The system includes functions such as patient information management, ward management, surgery schedule management and financial management. Hospital Management System suffers from an SQL injection vulnerability, which...
CVE-2021-46362
A Server-Side Template Injection SSTI vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via a crafted payload entered into the fullname parameter...
Sql injection
A Server-Side Template Injection SSTI vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via a crafted payload entered into the fullname parameter...
CVE-2022-23433
Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S12, 12.2.05.6000 in Android R11 and 11.6.08.6000 in Andoid Q10 allows attackers to register reminders or execute exporeted activities remotely...
CVE-2022-23433
Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S12, 12.2.05.6000 in Android R11 and 11.6.08.6000 in Andoid Q10 allows attackers to register reminders or execute exporeted activities remotely...
in liangliangyy/djangoblog
Description The application leaked emails of unvalidated users to anonymous user. Proof of Concept - Step 1: Go to http://127.0.0.1:8000/register and create account. After create success, you will receive URL like http://127.0.0.1:8000/account/result.html?type=register&id=4 - Step 2: Open another...
SAMSUNG Device 安全漏洞
SAMSUNG Device is a series of mobile smart devices from South Korean company Samsung SAMSUNG. The SAMSUNG Device suffers from a security vulnerability that stems from an Improper Access Control vulnerability, which can be exploited by an attacker to remotely register alerts or perform demo...
PT-2022-12670 · Magnolia · Magnolia
Name of the Vulnerable Software and Affected Versions: Magnolia versions prior to 6.2.3 Description: A Server-Side Template Injection SSTI issue in the Registration and Forgotten Password forms allows attackers to execute arbitrary code via a crafted payload entered into the fullname parameter...
PT-2022-10396 · Qualcomm · Snapdragon Connectivity +3
Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description: The issue is...
Permissive parameters and privilege escalation
An issue was discovered in Steve Pallen Coherence before 0.5.2 that is similar to a Mass Assignment vulnerability. In particular, "registration" endpoints e.g., creating, editing, updating allow users to update any coherencefields data. For example, users can automatically confirm their accounts ...
GHSA-MRQ8-53R4-3J5M Permissive parameters and privilege escalation
An issue was discovered in Steve Pallen Coherence before 0.5.2 that is similar to a Mass Assignment vulnerability. In particular, "registration" endpoints e.g., creating, editing, updating allow users to update any coherencefields data. For example, users can automatically confirm their accounts ...
Cross site scripting in registration template in xwiki-platform
Impact We found a possible XSS vector in the registerinline.vm template related to the xredirect hidden field. This template is only used in the following conditions: - the wiki must be open to registration for anyone - the wiki must be closed to view for Guest users more specifically the...
GHSA-GX6H-936C-VRRR Cross site scripting in registration template in xwiki-platform
Impact We found a possible XSS vector in the registerinline.vm template related to the xredirect hidden field. This template is only used in the following conditions: - the wiki must be open to registration for anyone - the wiki must be closed to view for Guest users more specifically the...
CVE-2022-23622
XWiki Platform contains an XSS vulnerability (CVE-2022-23622) in the registerinline.vm template associated with the xredirect hidden field. Exploitation requires the wiki to be open to registration and the XWiki.Registration page to be forbidden for guests (or equivalent rights); administrators e...
CVE-2022-23622 Cross site scripting in registration template in xwiki-platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is a cross site scripting XSS vector in the registerinline.vm template related to the xredirect hidden field. This template is only used in the following conditions:...
Qualcomm 多款产品代码问题漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits including primarily semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. A code issue vulnerability exists in multiple Qualcomm...
Metasploit Wrap-Up
Wordpress Exploitation Returns What's life without a little WordPress exploitation? Courtesy of Hacker5preme aka Ron Jost and h00die, we now have an exploit for CVE-2021-24862, a bug in the RestorationMagic WordPress plugin prior to 5.0.1.6 whereby user input was not properly escaped in the...
Feberr 12.7 Shell Upload Vulnerability
Exploit Title: Feberr - Multivendor Digital Products Marketplace arbitrary file upload Version 12.7 Google Dork: N/A Exploit Author: Sohel Yousef - email protected Software Link: https://www.codester.com/items/14224/feberr-multivendor-digital-products-marketplace Software link 2...
The vulnerability of the log management component of the Cisco Adaptive Security Device Manager application allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the log management component of the Cisco Adaptive Security Device Manager ASDM application relates to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
VulnCheck KEV: CVE-2022-0441
The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin...