Lucene search
+L

1492 matches found

CVE
CVE
•added 2024/02/27 12:00 a.m.•5685 views

CVE-2024-24095

Code-projects Simple Stock System version 1.0 is vulnerable to SQL Injection (CWE-89). The vulnerability stems from the system's susceptibility to malicious SQL commands, which could impact the confidentiality, integrity, and availability of the data. The provided documents do not specify a parti...

9.8CVSS7.3AI score0.00636EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/27 12:00 a.m.•6 views

CVE-2024-24095: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection...

9.8CVSS5.8AI score0.00636EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/26 12:00 a.m.•15 views

PT-2024-20266 · Unknown · Code-Projects Simple Stock System

Name of the Vulnerable Software and Affected Versions: Code-projects Simple Stock System version 1.0 Description: The issue is related to SQL Injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

9.8CVSS7.5AI score0.00636EPSS
SaveExploits0References6
NVD
NVD
•added 2024/02/23 12:15 p.m.•34 views

CVE-2024-25915

Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...

8.8CVSS5.2AI score0.00303EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/23 12:15 p.m.•53 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...

3.6CVSS5.5AI score0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/23 11:47 a.m.•43 views

CVE-2024-25915 WordPress Pexels: Free Stock Photos Plugin <= 1.2.2 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...

4.9CVSS5.5AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/23 11:47 a.m.•120 views

CVE-2024-25915

CVE-2024-25915 describes a Server-Side Request Forgery (SSRF) in the WordPress plugin Pexels: Free Stock Photos (versions

8.8CVSS6.6AI score0.00303EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/02/23 12:00 a.m.•15 views

WordPress Plugin Pexels Free Stock Photos Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

8.8CVSS6.9AI score0.00303EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/23 12:00 a.m.•3 views

CVE-2024-25915: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...

8.8CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
•added 2024/02/13 8:13 p.m.•27 views

A Hacker’s Mind is Out in Paperback

The paperback version of A Hackers Mind has just been published. Its the same book, only a cheaper format. But--and this is the real reason I am posting this--Amazon has significantly discounted the hardcover to $15 to get rid of its stock. This is much cheaper than I am selling it for, and cheap...

7.2AI score
SaveExploits0
Patchstack
Patchstack
•added 2024/02/12 12:00 a.m.•24 views

WordPress Pexels: Free Stock Photos Plugin <= 1.2.2 is vulnerable to Server Side Request Forgery (SSRF)

Software Pexels: Free Stock Photos Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Server Side Request Forgery SSRF CVE CVE-2024-25915 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 1ce792c12670 Credits Majed Refaea...

8.8CVSS6.6AI score0.00303EPSS
SaveExploits0References1Affected Software1
Schneier on Security
Schneier on Security
•added 2024/02/09 6:10 p.m.•17 views

No, Toothbrushes Were Not Used in a Massive DDoS Attack

The widely reported story last week that 1.5 million smart toothbrushes were hacked and used in a DDoS attack is false. Near as I can tell, a German reporter talking to someone at Fortinet got it wrong, and then everyone else ran with it without reading the German text. It was a hypothetical, whi...

7.2AI score
SaveExploits0
attackerkb
attackerkb
•added 2024/02/05 9:15 p.m.•22 views

CVE-2023-51951

SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the managebo.php file...

9.8CVSS6.3AI score0.0135EPSS
SaveExploits4References3
OSV
OSV
•added 2024/02/05 9:15 p.m.•13 views

CVE-2023-51951

SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the managebo.php file...

9.8CVSS6.2AI score0.0135EPSS
SaveExploits4References2
NVD
NVD
•added 2024/02/05 9:15 p.m.•46 views

CVE-2023-51951

SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the managebo.php file...

9.8CVSS9.8AI score0.0135EPSS
SaveExploits4References2
Prion
Prion
•added 2024/02/05 9:15 p.m.•37 views

Sql injection

SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the managebo.php file...

7.5CVSS9.4AI score0.0135EPSS
SaveExploits4References1Affected Software1
CNNVD
CNNVD
•added 2024/02/05 12:00 a.m.•16 views

Sourcecodester Stock Management System Security Vulnerability

Sourcecodester Stock Management System is an inventory management system. A security vulnerability exists in Sourcecodester Stock Management System version 1.0 that could allow a remote attacker to execute arbitrary code via the id parameter in managebo.php...

9.8CVSS7.7AI score0.0135EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2024/02/05 12:00 a.m.•7 views

PT-2024-14336

Name of the Vulnerable Software and Affected Versions Stock Management System version 1.0 Description The issue allows a remote attacker to execute arbitrary code via the id parameter in the "manage bo.php" file. This enables the attacker to potentially gain unauthorized access and control over t...

9.8CVSS8.8AI score0.0135EPSS
SaveExploits4References5
Cvelist
Cvelist
•added 2024/02/05 12:00 a.m.•71 views

CVE-2023-51951

SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the managebo.php file...

10AI score0.0135EPSS
SaveExploits4References2
CVE
CVE
•added 2024/02/05 12:00 a.m.•91 views

CVE-2023-51951

CVE-2023-51951 is an authenticated/unauthenticated SQL injection in Stock Management System 1.0 where the id parameter in manage_bo.php can allow a remote attacker to execute arbitrary code. The CVE is supported by multiple sources (NVD entry with CVSS v3.1: 9.8 base score, high impact, network a...

9.8CVSS9.8AI score0.0135EPSS
SaveExploits4References2Affected Software1
Rows per page
Query Builder