Lumos System Can Find Hidden Cameras and IoT Devices in Your Airbnb or Hotel Room

A group of academics has devised a system that can be used on a phone or a laptop to identify and locate Wi-Fi-connected hidden IoT devices in unfamiliar physical spaces. With hidden cameras being increasingly used to snoop on individuals in hotel rooms and Airbnbs, the goal is to be able to...

GHSA-JJMC-4P83-PP26 Logic error in Matrix SDK for Android

A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 aka Matrix SDK for Android before 1.2.2 leads to a situation where identity verification is inadequate and thus a key-requesting device can be impersonated...

Logic error in Matrix SDK for Android

A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 aka Matrix SDK for Android before 1.2.2 leads to a situation where identity verification is inadequate and thus a key-requesting device can be impersonated...

GHSA-W47G-4VRC-M3W2 Cross-site Scripting in Apache Pluto Chatroom demo

The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting XSS attacks. Mitigation: Uninstall the ChatRoomDemo war file - or - migrate to version 3.1.0 of the chat-room-demo war file...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

CVE-2022-30843

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

CVE-2022-30843

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

CVE-2022-30843

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

Cross site scripting

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

Sql injection

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

CVE-2022-30839

CVE-2022-30839 affects Room-rent-portal-site v1.0 and is described as a Cross-Site Scripting (XSS) vulnerability exposed via the parameter vehicle_name in /rrps/classes/Master.php?f=save_category. The current documents provide the vulnerability type and location but do not include root-cause deta...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

CVE-2022-30843

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

CVE-2022-30843

CVE-2022-30843 affects Room-rent-portal-site v1.0. The vulnerability is SQL Injection in /rrps/classes/Master.php?f=delete_category, id, enabling unauthenticated or low-privilege access to manipulate the database. Connected documents corroborate the issue and indicate high impact on confidentiali...

Room-rent-portal-site 跨站脚本漏洞

Room-rent-portal-site is a room for rent portal by the individual developer Carlo Montero. A security vulnerability exists in Room-rent-portal-site v1.0, which stems from a cross-site scripting issue in /rrps/classes/Master.php?f=savecategory...

Room-rent-portal-site SQL注入漏洞

Room-rent-portal-site is a room for rent portal by the individual developer Carlo Montero. A security vulnerability exists in Room-rent-portal-site v1.0, which stems from an SQL injection issue in /rrps/classes/Master.php?f=deletecategory...

CVE-2022-30843: Improper Neutralization of Special Elements used in an SQL Command

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

PT-2022-20356

Name of the Vulnerable Software and Affected Versions Room-rent-portal-site version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /rrps/classes/Master.php?f=delete category endpoint, specifically through the id variable. Recommendations For Room-rent-portal-site...