Judging Management System SQL注入漏洞

Judging Management System is a judging management system by Carlo Montero, an individual developer. A security vulnerability exists in Judging Management System v1.0, which is caused by an SQL injection in the sid parameter of the /php-jms/updateTxtview.php page...

CVE-2023-24641: Improper Neutralization of Special Elements used in an SQL Command

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateview.php...

PT-2023-19719

Name of the Vulnerable Software and Affected Versions Judging Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the sid parameter at the "/php-jms/updateTxtview.php" API endpoint. Recommendations For Judging...

CVE-2023-24643

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateBlankTxtview.php...

CVE-2023-24641

CVE-2023-24641 pertains to Judging Management System v1.0, where a SQL injection vulnerability exists in the updateview.php endpoint via the sid parameter. Concrete details across connected sources confirm a high-severity issue (CVSS v3.1: 9.8, CRITICAL) with network access, no user interaction, ...

PT-2023-19718

Name of the Vulnerable Software and Affected Versions Judging Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the sid parameter at the "/php-jms/updateview.php" API endpoint. Recommendations For Judging...

CVE-2023-24643: Improper Neutralization of Special Elements used in an SQL Command

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateBlankTxtview.php...

CVE-2023-24642: Improper Neutralization of Special Elements used in an SQL Command

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateTxtview.php...

SUSE CVE-2006-7236

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences...

SUSE CVE-2007-2444

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...

SUSE CVE-2010-3069

Stack-based buffer overflow in the 1 sidparse and 2 domsidparse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Windows Security ID SID on a file share...

Use After Free

chromium:sid is vulnerable to Use After Free. passwords in google chrome allows an attacker to remotely compromise the render process to exploit heap corruption using a crafter HTML page...

Privilege Escalation

tor:sid is vulnerable to privilege escalation. A logical error allows unsafe SOCKS4 protocol to be used but not the safe SOCKS4a protocol leading to unsafe traffic being allowed to pass...

Inconsistent Interpretation Of HTTP Requests

varnish:sid is vulnerable to Inconsistent Interpretation of HTTP Requests. An attacker could perform a smuggling attack by requesting certain headers to be made hop by hop on varnish servers which will not allow critical headers to be forwarded to the backend...

Wodat - Windows Oracle Database Attack Toolkit

Simple port of the popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat to C .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code. Perform password based attacks e.g. username as password, username list again...

ansible-freeipa bug fix and enhancement update

An update is available for ansible-freeipa. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ansible-freeipa package provides Ansible roles and playbooks to...

ansible-freeipa bug fix and enhancement update

An update is available for ansible-freeipa. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ansible-freeipa package provides Ansible roles and playbooks to...

ansible-freeipa bug fix and enhancement update

An update is available for ansible-freeipa. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ansible-freeipa package provides Ansible roles and playbooks to...

Prototype Pollution

chromium,bullseye and chromium,sid is vulnerable to prototype pollution. The vulnerability exists in the handler function which could be tricked into adding or modifying properties of Object.prototype using a proto payload...

Metasploit Weekly Wrap-Up

Bofloader - Windows Meterpreter Gets Beacon Object File Loader Support This week brings a new and frequently requested feature to the Windows Meterpreter, the Beacon Object File loader. This new extension, bofloader, allows for users to execute Beacon Object Files as written for either Cobalt...