Lucene search
+L

2058 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 10:25 p.m.•14 views

CVE-2022-32365

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/managefield.php?id=...

7.2CVSS8.1AI score0.00956EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:12 p.m.•15 views

CVE-2022-1980

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input leads to cross site scripting. The attack may be initiated remotely b...

4.8CVSS6.3AI score0.00634EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:11 p.m.•20 views

CVE-2022-1979

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input leads to cross site scripting. The attack can be initiated remotely but requires authentication...

4.8CVSS6.3AI score0.00617EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:44 p.m.•20 views

CVE-2022-26976

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization in the upload mechanism is leads to reflected XSS...

5.4CVSS6.9AI score0.00454EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:18 p.m.•17 views

CVE-2021-32659

Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services. In versions 2.6.0 and earlier, if a bridge has room upgrade handling turned on in the configuration the roomUpgradeOpts key when instantiating a new Bridge instance., any m.room.tombstone...

6.5CVSS6.7AI score0.00936EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:06 a.m.•19 views

CVE-2019-13379

On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults=RA reset and using the default credentials to get in...

9CVSS7.4AI score0.0297EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:49 a.m.•8 views

CVE-2018-12423

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.powerlevels event in force...

7.5CVSS6.7AI score0.0184EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:52 a.m.•17 views

CVE-2019-2702

Vulnerability in the Oracle Hospitality Cruise Dining Room Management component of Oracle Hospitality Applications subcomponent: Web Service. The supported version that is affected is 8.0.80. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

9.3CVSS7.3AI score0.01343EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 12:51 a.m.•23 views

CVE-2015-8601

The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restrictions and read messages from arbitrary Chat Rooms via unspecified vectors...

5CVSS7.2AI score0.01233EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 10:42 p.m.•17 views

CVE-2002-1849

ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause a denial of service by repeatedly logging into a chat room, hitting the back button, then logging into the same chat room as a different user, which fills the chat room with...

5CVSS7AI score0.02539EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/21 9:34 p.m.•18 views

CVE-2004-2710

Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to 1 sending certain typing statuses or 2 setting the chat room status bar to the current chat room name...

7.5CVSS8.3AI score0.02872EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/05/20 12:00 a.m.•16 views

AudioJailbreak: Jailbreak Attacks against End-To-End Large Audio-Language Models

Jailbreak attacks to Large audio-language models LALMs are studied recently, but they achieve suboptimal effectiveness, applicability, and practicability, particularly, assuming that the adversary can fully manipulate user prompts. In this work, we first conduct an extensive experiment showing th...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/12 1:15 p.m.•45 views

CVE-2025-4500

A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached...

7.8CVSS7.1AI score0.00374EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/10 1:15 p.m.•16 views

CVE-2025-4500

A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached...

7.8CVSS5.7AI score0.00374EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/10 12:31 p.m.•11 views

CVE-2025-4500 code-projects Hotel Management System Edit Room edit stack-based overflow

A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached...

5.3CVSS7AI score0.00374EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/10 12:31 p.m.•60 views

CVE-2025-4500 code-projects Hotel Management System Edit Room edit stack-based overflow

A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached...

5.3CVSS0.00374EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/10 12:00 a.m.•5 views

CVE-2025-4500: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached...

7.8CVSS5.9AI score0.00374EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/10 12:00 a.m.•23 views

PT-2025-20624 · Code Projects · Code-Projects Hotel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hotel Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Hotel Management System. The issue affects the Edit function of the Edit Room component. The manipulation of the...

7.8CVSS5.3AI score0.00374EPSS
SaveExploits1References10
OSV
OSV
•added 2025/05/02 6:18 a.m.•74 views

BIT-MOODLE-2024-43433 Moodle: matrix user/power level management not always working as expected with suspended users

A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Moodle users...

5.3CVSS5.2AI score0.00327EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/17 11:23 p.m.•24 views

CVE-2025-27565

An unauthenticated attacker can delete any user's "rooms" by knowing the user's and room IDs...

6.9CVSS7.1AI score0.00292EPSS
SaveExploits0References3
Rows per page
Query Builder