15976 matches found
CVE-2023-2864: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Online Jewelry Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file customer.php of the component POST Parameter Handler. The manipulation of the argument Custid leads to cross site scripting. The...
PT-2023-21867 · Sourcecodester · Sourcecodester Online Jewelry Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Jewelry Store version 1.0 Description: A vulnerability was found in the file customer.php of the component POST Parameter Handler. The manipulation of the Custid argument leads to cross site scripting. The attack may be...
Ubuntu: Security Advisory (USN-6073-7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6073-7 python-glance-store regression
USN-6073-2 fixed a vulnerability in Glancestore. Unfortunately the update introduced a regression with detaching volumes. The security fix has been removed pending further investigation. We apologize for the inconvenience. Original advisory details: Jan Wasilewski and Gorka Eguileor discovered th...
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Glance_store regression (USN-6073-7)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has a package installed that is affected by a vulnerability as referenced in the USN-6073-7 advisory. USN-6073-2 fixed a vulnerability in Glancestore. Unfortunately the update introduced a regression with detaching volumes. The security fix has...
Store Creation Fails with "Set-DSNewClusterEnvironment" privilege related errors
The below error occured when the user is creating new stores on the Storefront server: Citrix.DeliveryServices.PowerShell.Command.RunnerInterfaces.Exceptions.PowerShellExecutionException: An error occurred running the command: 'Set-DSNewClusterEnvironment' Not possible to enable all the required...
CVE-2023-2815
A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...
CVE-2023-2815
A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...
Sql injection
A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...
CVE-2023-2815
The CVE-2023-2815 entry affects SourceCodester Online Jewelry Store 1.0. The vulnerability is in the file supplier.php of the POST Parameter Handler, where manipulating the suppid argument leads to SQL injection. It is exploitable remotely and exploits are publicly disclosed. Multiple sources con...
CVE-2023-2815 SourceCodester Online Jewelry Store POST Parameter supplier.php sql injection
A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...
OESA-2023-1289 redis security update
Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an open source, in-memory database that persists on disk. Authenticated users can use the HINCRBYFLOAT command to create...
CVE-2023-2815: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...
SourceCodester Online Jewelry Store SQL Injection Vulnerability
Online Jewelry Store is an online jewelry store by janobe individual developers. A SQL injection vulnerability exists in SourceCodester Online Jewelry Store version 1.0 due to unknown functionality in the file supplier.php in the component's POST parameter handler, which results in an sql injecti...
PT-2023-21595 · Sourcecodester · Sourcecodester Online Jewelry Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Jewelry Store version 1.0 Description: A critical issue was found in the file supplier.php of the component POST Parameter Handler, where the manipulation of the suppid argument leads to sql injection. The attack can be...
This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide
A cybercrime enterprise known as Lemon Group is leveraging millions of pre-infected Android smartphones worldwide to carry out their malicious operations, posing significant supply chain risks. "The infection turns these devices into mobile proxies, tools for stealing and selling SMS messages,...
Apple Thwarts $2 Billion in App Store Fraud, Rejects 1.7 Million App Submissions
Apple has announced that it prevented over $2 billion in potentially fraudulent transactions and rejected roughly 1.7 million app submissions for privacy and security violations in 2022. The computing giant said it terminated 428,000 developer accounts for potential fraudulent activity, blocked...
Online Computer and Laptop Store Arbitrary File Upload Vulnerability (CNVD-2023-40599)
Online Computer and Laptop Store is an online computer and laptop store. An arbitrary file upload vulnerability exists in Online Computer and Laptop Store v1.0, which stems from a failure to restrict file uploads at /classes/Users.php?f=save, and can be exploited by an attacker to cause remote co...
Redis security vulnerabilities
Redis Labs Redis is an open source, ANSI C, web-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis Labs, Inc. that provides APIs in multiple languages. A security vulnerability exists in Redis version 7.0.10 that stems from a segmentation violation...
