Lucene search
+L

6747 matches found

Cvelist
Cvelist
added 2023/04/14 7:00 a.m.53 views

CVE-2023-2036 Campcodes Video Sharing Website upload.php sql injection

A vulnerability was found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file upload.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed...

6.5CVSS8AI score0.0065EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/04/14 6:31 a.m.41 views

CVE-2023-2035 Campcodes Video Sharing Website signup.php sql injection

A vulnerability has been found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file signup.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has bee...

6.5CVSS8.1AI score0.00656EPSS
SaveExploits1References3
CVE
CVE
added 2023/04/14 6:31 a.m.98 views

CVE-2023-2035

The CVE-2023-2035 issue affects Campcodes Video Sharing Website 1.0, with a SQL injection in signup.php via the id parameter. The vulnerability can be triggered remotely and has been publicly disclosed. Several connected sources corroborate a critical flaw in an unknown functionality of signup.ph...

7.5CVSS7.2AI score0.00656EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/14 12:00 a.m.20 views

PT-2023-17432 · Unknown · Campcodes Video Sharing Website

Name of the Vulnerable Software and Affected Versions: Campcodes Video Sharing Website version 1.0 Description: A critical issue was found in the file upload.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely. Recommendations: For Campcodes...

7.5CVSS8.3AI score0.0065EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/04/14 12:00 a.m.12 views

PT-2023-17431 · Unknown · Campcodes Video Sharing Website

Name of the Vulnerable Software and Affected Versions: Campcodes Video Sharing Website version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file signup.php. The manipulation of the id argument leads to SQL injection. The attack can be...

7.5CVSS8.1AI score0.00656EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.8 views

Video Sharing Website SQL注入漏洞

Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem with the file adminclass.php, where manipulation of the parameter email can lead to sql injection...

7.5CVSS6.9AI score0.00605EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.10 views

Video Sharing Website SQL注入漏洞

Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem in the file upload.php, where manipulation of the parameter id can lead to sql injection...

7.5CVSS6.9AI score0.0065EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.10 views

Video Sharing Website SQL注入漏洞

Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem in the file watch.php, where manipulation of the parameter code can lead to sql injection...

9.8CVSS7.1AI score0.00791EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.23 views

Video Sharing Website SQL注入漏洞

Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem in the file signup.php, where manipulation of the parameter id can lead to sql injection...

7.5CVSS6.9AI score0.00656EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/14 12:00 a.m.7 views

PT-2023-17434 · Unknown · Campcodes Video Sharing Website

Name of the Vulnerable Software and Affected Versions: Campcodes Video Sharing Website version 1.0 Description: A critical issue has been found, affecting the admin class.php file, where manipulation of the email argument leads to SQL injection. This can be initiated remotely. Recommendations: Fo...

7.5CVSS7.9AI score0.00605EPSS
SaveExploits1References4
CNVD
CNVD
added 2023/04/13 12:00 a.m.74 views

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2023-72199)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

8.1CVSS6.5AI score0.06233EPSS
SaveExploits3References1
BDU FSTEC
BDU FSTEC
added 2023/04/13 12:00 a.m.8 views

The vulnerability of the file-sharing mechanism of Nighthawk WiFi 6 Router (RAX30) allows a hacker to increase their privileges.

The vulnerability of the file-sharing mechanism of the Nighthawk WiFi 6 Router RAX30 software lies in the deficiencies of its authentication process. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

9CVSS7.7AI score0.00874EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/04/12 5:45 p.m.209 views

GO-2023-1709 Cache-timing attacks in Shamir's secret sharing in github.com/hashicorp/vault

HashiCorp Vault's implementation of Shamir's secret sharing uses precomputed table lookups, and is vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a bru...

5CVSS4.8AI score0.0021EPSS
SaveExploits0References2
NVD
NVD
added 2023/04/11 5:15 p.m.35 views

CVE-2022-43946

Multiple vulnerabilities including an incorrect permission assignment for critical resource CWE-732 vulnerability and a time-of-check time-of-use TOCTOU race condition CWE-367 vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute...

8.1CVSS8.1AI score0.00701EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/04/11 4:06 p.m.13 views

CVE-2022-43946

Multiple vulnerabilities including an incorrect permission assignment for critical resource CWE-732 vulnerability and a time-of-check time-of-use TOCTOU race condition CWE-367 vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute...

7.5CVSS7.5AI score0.00701EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/11 4:06 p.m.43 views

CVE-2022-43946

Multiple vulnerabilities including an incorrect permission assignment for critical resource CWE-732 vulnerability and a time-of-check time-of-use TOCTOU race condition CWE-367 vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute...

7.5CVSS8.6AI score0.00701EPSS
SaveExploits0References1
Fortinet
Fortinet
added 2023/04/11 12:00 a.m.90 views

FortiClient (Windows) - Improper write access over FortiClient pipe object

Multiple vulnerabilities including an incorrect permission assignment for critical resource CWE-732 vulnerability and a time-of-check time-of-use TOCTOU race condition CWE-367 vulnerability in FortiClientWindows may allow an attacker on the same file sharing network to execute commands via writin...

5.1CVSS8.2AI score0.00701EPSS
SaveExploits0Affected Software1
The Hacker News
The Hacker News
added 2023/04/07 6:15 a.m.7 views

Microsoft Takes Legal Action to Disrupt Cybercriminals' Illegal Use of Cobalt Strike Tool

Microsoft said it teamed up with Fortra and Health Information Sharing and Analysis Center Health-ISAC to tackle the abuse of Cobalt Strike by cybercriminals to distribute malware, including ransomware. To that end, the tech giant's Digital Crimes Unit DCU revealed that it secured a court order i...

6.9AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2023/04/06 12:00 p.m.20 views

The Dangerous Weak Link in the US Food Chain

Without an information sharing and analysis center, the country’s food and agriculture sector is uniquely vulnerable to hackers...

6.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/04/04 9:54 a.m.31 views

Think Before You Share the Link: SaaS in the Real World

Collaboration sits at the essence of SaaS applications. The word, or some form of it, appears in the top two headlines on Google Workspace's homepage. It can be found six times on Microsoft 365's homepage, three times on Box, and once on Workday. Visit nearly any SaaS site, and odds are...

6.4AI score
SaveExploits0
Rows per page
Query Builder