CVE-2024-7282

A vulnerability classified as critical was found in SourceCodester Lot Reservation Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/managemodel.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

PT-2024-38250 · Unknown · Itsourcecode Online Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Blood Bank Management System version 1.0 Description: A problem was found in the processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to...

PT-2024-38271 · Ckeditor +1 · Ckeditor +1

Name of the Vulnerable Software and Affected Versions: YouDianCMS version 7 Description: A critical issue was found in an unknown function of the file /Public/ckeditor/plugins/multiimage/dialogs/image upload.php. The manipulation of the files argument leads to unrestricted upload. It is possible ...

PT-2024-38234 · Sourcecodester · Sourcecodester Establishment Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Establishment Billing Management System version 1.0 Description: A vulnerability has been found in the system, classified as problematic, affecting the file /admin/ajax.php?action=save settings. The manipulation of the name...

CVE-2024-7217

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. This vulnerability affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has...

CVE-2024-7187

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been declared as critical. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to buffer overflow. The attack can be initiated remotely...

CVE-2024-7161

A vulnerability classified as problematic was found in SeaCMS 13.0. Affected by this vulnerability is an unknown functionality of the file /member.php?action=chgpwdsubmit of the component Password Change Handler. The manipulation of the argument newpwd/newpwd2 leads to cross-site request forgery...

Severalnines Cluster Control 安全漏洞

Severalnines Cluster Control is agentless management and automation software for database clusters from Severalnines. Severalnines Cluster Control versions 1.9.8 prior to 1.9.8-9778, 2.0.0 prior to 2.0.0-9779, and 2.1.0 prior to 2.1.0-9780 have a security vulnerability that originates from the...

CVE-2024-7080

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /E-Insurance/. The manipulation leads to direct request. The attack can be launched remotely. The exploit has be...

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to delete user accounts.

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to delete user accounts...

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2024-6807

A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sscdms/classes/Users.php?f=save of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2024-38061 DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

...

CVE-2024-23562

A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information. A remote unauthenticated attacker could exploit this vulnerability to obtain information to launch further attacks against the affected system...

PT-2024-37699 · Unknown · Heyewei Springbootcms

Name of the Vulnerable Software and Affected Versions: heyewei SpringBootCMS up to 2024-05-28 Description: A vulnerability has been found in the Guestbook Handler component of heyewei SpringBootCMS, affecting an unknown function of the file /guestbook. The manipulation of the Content argument lea...

The vulnerability of the login.php file of the Loan Management System allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the login.php file of the Loan Management System is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary SQL code through the username parameter...

AdminerEvo Code Issue Vulnerability

AdminerEvo is an AdminerEvo open source database management tool in a single PHP file. A security vulnerability exists in AdminerEvo. A remote attacker could exploit the vulnerability to enumerate or access otherwise inaccessible systems...

Multiple BAS-IP Products Security Breach

BAS-IP AV Series and others are products of BAS-IP Corporation.BAS-IP AV Series is a series of smart personal entrance panels.BAS-IP AA Series is a series of smart apartment entrance panels.BAS-IP BA Series is a series of visual intercom outdoor entrance panels. A security vulnerability exists in...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App, related to the disclosure of information through registration files, allows a hacker to obtain encrypted user credentials.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the disclosure of information through registration files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain encrypted use...

CVE-2024-6189

A vulnerability was found in Tenda A301 15.13.08.12. It has been classified as critical. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. It is possible to launch the attack remotel...