Lucene search
K

4912 matches found

Tenable Nessus
Tenable Nessus
added 2021/11/02 12:0 a.m.32 views

EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2021-2644)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - DISPUTED A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there i...

7.5CVSS6.8AI score0.03898EPSS
Exploits1References2
Kitploit
Kitploit
added 2021/10/23 11:30 a.m.26 views

SubCrawl - A Modular Framework For Discovering Open Directories, Identifying Unique Content Through Signatures And Organizing The Data With Optional Output Modules, Such As MISP

SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output modules an...

7.1AI score
Exploits0References10
OSV
OSV
added 2021/10/22 2:15 p.m.2 views

CVE-2021-42169

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...

9.8CVSS5.8AI score0.0274EPSS
Exploits1References2
NVD
NVD
added 2021/10/22 2:15 p.m.13 views

CVE-2021-42169

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...

9.8CVSS0.0274EPSS
Exploits1References2
Prion
Prion
added 2021/10/22 2:15 p.m.15 views

Sql injection

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...

7.5CVSS9.6AI score0.0274EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/10/22 1:9 p.m.13 views

CVE-2021-42169

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...

9.9AI score0.0274EPSS
Exploits1References2
CVE
CVE
added 2021/10/22 1:9 p.m.66 views

CVE-2021-42169

CVE-2021-42169 refers to a remote SQL injection bypass authentication vulnerability in “The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code.” The login parameter username is not protected, allowing malicious payloads to bypass security and authenticate admin re...

9.8CVSS9.6AI score0.0274EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2021/10/22 12:0 a.m.2 views

Sqlite SQL注入漏洞

Sqlite is a lightweight database that is an ACID-compliant relational database management system. Sqlite suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability ...

9.8CVSS8.7AI score0.0274EPSS
Exploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2021/10/19 3:38 p.m.74 views

Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs

Summary Cloud Pak for Security CP4S v1.7.2.0 and earlier uses packages that are vulnerable to several CVEs. These issues have been addressed in an update. See the Fixes section below for instructions. Vulnerability Details CVEID: CVE-2020-24332 DESCRIPTION: TrouSerS could allow a remote...

9.8CVSS10.6AI score0.93422EPSS
Exploits75Affected Software1
Exploit DB
Exploit DB
added 2021/10/18 12:0 a.m.293 views

Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS)

Exploit Title: Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting XSS Date: 17-10-2021 Exploit Author: Aniket Deshmane Vendor Homepage: https://www.sourcecodester.com/php/14959/companys-recruitment-management-system-php-and-sqlite-free-source-code.html Software Lin...

7AI score
Exploits0
0day.today
0day.today
added 2021/10/13 12:0 a.m.244 views

Simple Issue Tracker System 1.0 - SQL injection Authentication Bypass Vulnerability

Exploit Title: Simple Issue Tracker System 1.0 - SQLi Authentication Bypass Exploit Author: Bekir Bugra TURKOGLU Vendor Homepage: https://www.sourcecodester.com/php/14938/simple-issue-tracker-system-project-using-php-and-sqlite-free-download.html Software Link:...

0.9AI score
Exploits0
Packet Storm
Packet Storm
added 2021/10/13 12:0 a.m.262 views

Simple Payroll System 1.0 SQL Injection

Exploit Title: Simple Payroll System 1.0 - SQLi Authentication Bypass Date: 2021-10-09 Exploit Author: Yash Mahajan Vendor Homepage: https://www.sourcecodester.com/php/14974/simple-payroll-system-dynamic-tax-bracket-php-using-sqlite-free-source-code.html Software Link:...

0.3AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/10/11 6:12 p.m.62 views

Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities

Summary IBM Data Risk Manager has addressed the following vulnerabilities: Vulnerability Details CVEID: CVE-2021-20227 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by a use-after-free flaw in the SELECT query function in src/select.c. By sending a specially-crafted request, a...

8.8CVSS10AI score0.78684EPSS
Exploits35Affected Software1
Kitploit
Kitploit
added 2021/10/11 11:30 a.m.24 views

BruteLoops - Protocol Agnostic Online Password Guessing API

A dead simple library providing the foundational logic for efficient password brute force attacks against authentication interfaces. See various Wiki sections for more information. A "modular" example is included with the library that demonstrates how to use this package. It's fully functional an...

7.3AI score
Exploits0References6
Packet Storm
Packet Storm
added 2021/10/08 12:0 a.m.322 views

Simple Online College Entrance Exam System 1.0 Unauthenticated Admin Creation

Exploit Title: Simple Online College Entrance Exam System 1.0 - Unauthenticated Admin Creation Date: 07.10.2021 Exploit Author: Amine ismail @aminei Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software...

0.4AI score
Exploits0
Packet Storm
Packet Storm
added 2021/10/08 12:0 a.m.258 views

Simple Online College Entrance Exam System 1.0 SQL Injection

Exploit Title: Simple Online College Entrance Exam System 1.0 - 'Multiple' SQL injection Date: 07.10.2021 Exploit Author: Amine ismail @aminei Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software Link:...

0.6AI score
Exploits0
0day.today
0day.today
added 2021/10/08 12:0 a.m.219 views

Simple Online College Entrance Exam System 1.0 - Unauthenticated Admin Creation Vulnerability

Exploit Title: Simple Online College Entrance Exam System 1.0 - Unauthenticated Admin Creation Exploit Author: Amine ismail @aminei Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software Link:...

0.6AI score
Exploits0
0day.today
0day.today
added 2021/10/08 12:0 a.m.269 views

Online Employees Work From Home Attendance System 1.0 - SQL injection Authentication Bypass Vulnerab

Exploit Title: Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass Exploit Author: Merve Oral Vendor Homepage: https://www.sourcecodester.com/php/14981/online-employees-work-home-attendance-system-php-and-sqlite-free-source-code.html Software Link:...

0.6AI score
Exploits0
0day.today
0day.today
added 2021/10/08 12:0 a.m.318 views

Simple Online College Entrance Exam System 1.0 - SQL Injection Authentication Bypass Vulnerability

Exploit Title: Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass Exploit Author: Mevlüt Yılmaz Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software Link:...

0.7AI score
Exploits0
Exploit DB
Exploit DB
added 2021/10/08 12:0 a.m.238 views

Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass

Exploit Title: Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass Date: 08.10.2021 Exploit Author: Merve Oral Vendor Homepage: https://www.sourcecodester.com/php/14981/online-employees-work-home-attendance-system-php-and-sqlite-free-source-code.html Software Link:...

7.4AI score
Exploits0
Rows per page
Query Builder