1912 matches found
The vulnerability of the handle_ipv6IpForwarding() function in the Net-SNMP software suite for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the handleipv6IpForwarding function in the Net-SNMP software suite for the Linux operating system is related to a NULL Pointer Exception issue. This exception can be exploited by an attacker through a specially created UDP packet to cause a service failure. Exploiting this...
CVE-2023-22576
Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged attacker may potentially exploit this vulnerability leading to the execution of arbitrary executable on the operating system with high privileges...
TOTOLINK X5000R addBlacklist Function OS Command Injection Vulnerability
The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK X5000R version v9.1.0cu.2350b20230313. The vulnerability stems from the addBlacklist function in the file /cgi-bin/cstecgi.cgi failing to properly filter...
CVE-2024-7937
A vulnerability classified as critical was found in itsourcecode Project Expense Monitoring System 1.0. This vulnerability affects unknown code of the file printtransfer.php. The manipulation of the argument transferid leads to sql injection. The attack can be initiated remotely. The exploit has...
SourceCodester Online Graduate Tracer System SQL注入漏洞
SourceCodester Online Graduate Tracer System is a web-based application project developed by SourceCodester using PHP and MySQL database. Its main purpose is to provide a platform for a school to track their alumni and generate graphical reports on alumni status. A SQL injection vulnerability...
CVE-2024-38117
NTFS Elevation of Privilege Vulnerability...
CVE-2024-7676
A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical. Affected is the function savepackage of the file /classes/Master.php?f=savepackage. The manipulation of the argument id leads to sql injection. It is possible to launch the...
CVE-2024-40477
A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "email" parameter...
CVE-2024-33978 Cross-site Scripting in Janobe E-Negosyo System
Cross-Site Scripting XSS vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'category' parameter in '/index.php'...
BELL-CVE-2024-42099
Bulletin has no description...
Unspecified Vulnerability in SyroTech SY-GPON-1110-WDONT
The SyroTech SY-GPON-1110-WDONT is a wireless router from SyroTech. A security vulnerability exists in the SyroTech SY-GPON-1110-WDONT that stems from improper implementation of a password policy. An attacker can exploit this vulnerability to launch further attacks on the system...
The vulnerability of the GLPI system for handling requests and incidents, related to the disclosure of confidential information to unauthorized individuals, allows a violator to disclose confidential data.
The vulnerability of the GLPI system for handling requests and incidents involves the disclosure of confidential information to unauthorized individuals. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose confidential data...
CVE-2024-32484
An reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in Ankitects Anki 24.04. A specially crafted flashcard can lead to JavaScript code execution and result in an arbitrary file read. An attacker can share a malicious flashcard to trigger this vulnerability...
The vulnerability of the PowerScale OneFS operating system, related to access control errors, allows attackers to escalate their privileges.
The vulnerability of the PowerScale OneFS operating system is related to access control errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
Criminal Gang Physically Assaulting People for Their Cryptocurrency
This is pretty horrific: …a group of men behind a violent crime spree designed to compel victims to hand over access to their cryptocurrency savings. That announcement and the criminal complaint laying out charges against St. Felix focused largely on a single theft of cryptocurrency from an elder...
The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks...
Google Android Framework elevation of privilege vulnerability (CNVD-2025-18827)
Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android Framework due to an error in a framework component that can be exploited by an attacker to gain elevated privileges on the system...
Microsoft Windows Remote Desktop Licensing Remote Code Execution Vulnerability
Microsoft Windows Remote Desktop Licensing is a remote desktop licensing service that allows users to connect interactively to remote computers. A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Licensing, which is caused by a flaw in the Remote Desktop Licensing...
Siemens RUGGEDCOM ROS Information Disclosure Vulnerability (CNVD-2024-31234)
Siemens RuggedCom ROS is an operating system from Siemens, Germany, used in the RuggedCom series of switches. An information disclosure vulnerability exists in Siemens RUGGEDCOM ROS, which can be exploited by an attacker to expose sensitive system information to unauthorized control...
