CVE-2023-43319

Cross Site Scripting XSS vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

PT-2023-28775 · Icewarp · Icewarp Webclient

Name of the Vulnerable Software and Affected Versions: IceWarp WebClient version 10.3.5 Description: A Cross Site Scripting XSS issue in the Sign-In page allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter. This enables attackers to...

CVE-2023-43319: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

Zoo Management System SQL Injection Vulnerability (CNVD-2023-72245)

Zoo Management System is a zoo management system. It provides an online and automated platform for zoo organizations to manage their daily records. Zoo Management System v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on th...

CVE-2023-41615

Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields...

CVE-2023-41615

Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields...

CVE-2023-41615

Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields...

Sql injection

Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields...

CVE-2023-41615

Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields...

Zoo Management System SQL注入漏洞

Zoo Management System is a zoo management system. It provides an online and automated platform for zoo organizations to manage their daily records. Zoo Management System v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on th...

CVE-2023-41615: Improper Neutralization of Special Elements used in an SQL Command

Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields...

CVE-2023-41615

CVE-2023-41615 affects Zoo Management System v1.0, with multiple SQL injection vulnerabilities in the Admin sign‑in page via the username and password fields. The root cause is insufficient input validation on the sign‑in form, enabling arbitrary SQL execution and potential data theft. While seve...

PT-2023-28000 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue is related to multiple SQL injection vulnerabilities found in the Admin sign-in page of the Zoo Management System. These vulnerabilities can be exploited via the username and password...

dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method

A vulnerability was found in dotNET applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords and bypass security restrictions. This flaw allows a remote attacker to bypass security features, causing an impact on...

dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method

A vulnerability was found in dotNET applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords and bypass security restrictions. This flaw allows a remote attacker to bypass security features, causing an impact on...

July 25, 2023—KB5028244 (OS Build 19045.3271) Preview

None None...

July 25, 2023—KB5028245 (OS Build 22000.2245) Preview

None None...

dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method

A vulnerability was found in dotNET applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords and bypass security restrictions. This flaw allows a remote attacker to bypass security features, causing an impact on...

dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method

A vulnerability was found in dotNET applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords and bypass security restrictions. This flaw allows a remote attacker to bypass security features, causing an impact on...

dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method

A vulnerability was found in dotNET applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords and bypass security restrictions. This flaw allows a remote attacker to bypass security features, causing an impact on...