11758 matches found
Online Course Registration 信任管理问题漏洞
Online Course Registration is a PHP and MySQL based online course registration system from the PHPGurukul Phpgurukul team. A trust management issue vulnerability exists in Online Course Registration, which stems from hard-coded certificates included in the product source code, and can be exploite...
GHSA-7RJP-FGWJ-47RW Missing authentication in ShenYu
Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1...
Hackers Using Device Registration Trick to Attack Enterprises with Lateral Phishing
Microsoft has disclosed details of a large-scale, multi-phase phishing campaign that uses stolen credentials to register devices on a victim's network to further propagate spam emails and widen the infection pool. The tech giant said the attacks manifested through accounts that were not secured...
Evolved phishing: Device registration trick adds to phishers’ toolbox for victims without MFA
We have recently uncovered a large-scale, multi-phase campaign that adds a novel technique to traditional phishing tactics by joining an attacker-operated device to an organization’s network to further propagate the campaign. We observed that the second stage of the campaign was successful agains...
Evolved phishing: Device registration trick adds to phishers’ toolbox for victims without MFA
We have recently uncovered a large-scale, multi-phase campaign that adds a novel technique to traditional phishing tactics by joining an attacker-operated device to an organization’s network to further propagate the campaign. We observed that the second stage of the campaign was successful agains...
CVE-2021-4133
A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled...
CVE-2021-46084
uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via "close registration information" input box...
Cross site scripting
uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via "close registration information" input box...
CVE-2021-46084
CVE-2021-46084 affects uscat, a forum system based on Javaex + Ssm. The vulnerability is a Cross Site Scripting (XSS) issue via the "close registration information" input box. The connected documents confirm the vulnerability exists but do not provide exploitation details, affected versions, or r...
CVE-2022-23945
Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1...
CVE-2021-45802
MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration...
CVE-2021-45802
MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration...
Sql injection
MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration...
CVE-2022-23945 Apache ShenYu missing authentication allows gateway registration
Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1...
PT-2022-1763 · Apache · Apache Shenyu
Name of the Vulnerable Software and Affected Versions: Apache ShenYu versions 2.4.0 through 2.4.1 Description: The issue is related to insufficient protection of registration data, allowing a remote attacker to obtain user registration data using a specially crafted HTTP request. This can lead to...
Uscat 跨站脚本漏洞
Uscat is a forum system based on Javaex + Ssm development. A cross-site scripting vulnerability exists in uscat, which stems from a cross-site scripting XSS vulnerability in the close registration information input box of uscat...
CVE-2021-42168
Cross Site Scripting XSS in Sourcecodester Try My Recipe Recipe Sharing Website - CMS by oretnom23, allows attackers to gain the PHPSESID or other unspecified impacts via the fullname parameter to the loginregistration page...
CVE-2021-42168
Cross Site Scripting XSS in Sourcecodester Try My Recipe Recipe Sharing Website - CMS by oretnom23, allows attackers to gain the PHPSESID or other unspecified impacts via the fullname parameter to the loginregistration page...
Try My Recipe 跨站脚本漏洞
Try My Recipe is a recipe sharing site by the personal developer of Carlo Montero. It is used for any user who enjoys cooking to explore other people's recipes and post/share their own. Try My Recipe Recipe Sharing Website - CMS suffers from a cross-site scripting vulnerability that stems from a...