2012 matches found
Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft
ProxyShell Proof of Concept Exploit for Microsoft Exchange CVE...
Man-in-the-middle (MITM)
nbdkit:sid is vulnerable to man-in-the-middle. A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBDOPTSTRUCTUREDREPLY before proxying everything else a client sends to the...
AD Starter Scan - Dangerous Trust Relationship
Binary data adsitrustunsafe.nbin...
Sql injection
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php...
CVE-2021-26765
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php...
PT-2021-17129 · Unknown · Phpgurukul Student Record System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 4.0 Description: The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the sid parameter to the "edit-sub.php" endpoint. Recommendations: For PHPGurukul Student...
PHPGurukul Student Record System SQL注入漏洞
PHPGurukul Student Record System is an application. A SQL injection vulnerability exists in PHPGurukul Student Record System version 4.0, which stems from the lack of validation of externally entered SQL statements in the sid parameter of edit-sub.php, and can be exploited by remote attackers to...
CVE-2021-26765: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php...
Cross-site Scripting (XSS)
otrs2:sid is vulnerable to cross-site scripting. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction...
Man-in-the-middle (MITM)
bluez is vulnerable to Man-in-the-middle MITM. The vulnerability exists in smpcmdpublickey function of bluetooth/smp.c due to the failure of both remote and local non-debug public keys which allows an attacker to identify the Passkey used during pairing...
CVE-2021-24360
The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users contributor+ to perform Blind SQL Injection attacks...
CVE-2021-24360
The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users contributor+ to perform Blind SQL Injection attacks...
WordPress SQL注入漏洞
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.Yes/No Chart is a plugin for WordPress. Yes/No Chart WordPress plugin version prior to 1.0.12 suffers from a SQL injection...
CVE-2021-24360: Improper Neutralization of Special Elements used in an SQL Command
The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users contributor+ to perform Blind SQL Injection attacks...
PT-2021-15896
Name of the Vulnerable Software and Affected Versions Yes/No Chart WordPress plugin versions prior to 1.0.12 Description The issue allows medium privilege users, specifically those with contributor or higher privileges, to perform Blind SQL Injection attacks due to the lack of sanitization of the...
Cross-Site Request Forgery
firefox:sid is vulnerable to cross-site request forgery...
Information Disclosure
libgcrypt20:sid is vulnerable to information disclosure. It is due to a flaw in ElGamal encryption implementation...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. The function gfhevcreadppsbsinternal function in mediatools/avparsers.c causes a loop when a malicious file, pps-numtilecolumns larger than sizeofpps-columnwidth results in a heap overflow in the loop...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. In the adtsdmxprocess function in filters/reframeadts.c , a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...