6612 matches found
PT-2022-23926 · Unknown · Seccome Ehoney
Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue was found, affecting some unknown functionality of the file "/api/v1/bait/set". The manipulation of the Payload argument leads to SQL injection. This issue can be...
OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to...
OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to...
CVE-2022-3584
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file edituser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-3580
A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. This issue affects some unknown processing of the component User Creation Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...
CVE-2022-3580
A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. This issue affects some unknown processing of the component User Creation Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...
CVE-2022-3582
A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack can be launched...
CVE-2022-3548
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Add New Storage Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be...
Human Resource Management System 安全漏洞
Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System, which stems from an SQL injection caused by some unknown functions in its getstatecity.php component that operate on the...
CVE-2021-43362 MedData HBYS 1.0 Remote SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MedData HBYS allows SQL Injection.This issue affects HBYS: from unspecified before 1.1...
Carlo Gavazzi UWP 操作系统命令注入漏洞
Carlo Gavazzi UWP is a monitoring and control Universal Web Platform from Carlo Gavazzi. for applications such as building automation, energy efficiency performance management and parking lot guidance. An operating system command injection vulnerability exists in Carlo Gavazzi UWP 3.0, which can ...
多款Apple产品 安全漏洞
Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. watchOs is an operating system for watches used on the Apple Watch. A security vulnerability exists in several Apple products, which could resu...
Exploit for SQL Injection in Jflyfox Jfinal_Cms
CVE-2022-37204 CVE-2022-37204 POC Suggested description...
Sql injection
Hospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...
Xiuno BBS 跨站脚本漏洞
Xiuno BBS is an open source forum program based on PHP and MySQL. A security vulnerability exists in Xiuno BBS version 4.0.4, which can be exploited by remote attackers to execute arbitrary web script or HTML via the attachment upload function...
The vulnerability of the utils.generateUUID function in the NodeBB Forum Software allows a violator to elevate their privileges.
The vulnerability of the utilsGenerateUUID function in the NodeBB Forum Software is related to errors in the code for generating pseudo-random numbers for password reset codes. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
Tenda AC9 缓冲区错误漏洞
Tenda AC9 is a wireless router from Tenda, a Chinese company. A security vulnerability exists in Tenda AC9 firmware version V15.03.05.19, which stems from the operation of its /goform/setMacFilterCfg component on the parameter deviceList that allows a remote attacker to submit a special request...
Tenda AC9 缓冲区错误漏洞
Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC9 firmware version V15.03.05.19, which stems from its /goform/SetLEDCfg component's manipulation of the parameter time that allows a remote attacker to submit a special request resulting in a stack overflo...
Simple Task Managing System 跨站脚本漏洞
Simple Task Managing System is a simple task management system. Simple Task Managing System suffers from a cross-site scripting vulnerability that stems from its unknown code manipulation of the parameter studentadd resulting in cross-site scripting. The attack method can be initiated remotely an...