5181 matches found
PT-2024-20421 · Unknown · Daily Habit Tracker
Name of the Vulnerable Software and Affected Versions: Daily Habit Tracker version 1.0 Description: An issue in the software allows a remote attacker to manipulate trackers via the "home.php", "add-tracker.php", "delete-tracker.php", "update-tracker.php" components. Recommendations: For Daily Hab...
PT-2024-20419 · Unknown · Daily Habit Tracker
Name of the Vulnerable Software and Affected Versions: Daily Habit Tracker version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the day, exercise, pray, read book, vitamins, laundry, alcohol, and meat parameters in the "add-tracker.php" and...
CVE-2024-24494
Cross Site Scripting vulnerability in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via the day, exercise, pray, readbook, vitamins, laundry, alcohol and meat parameters in the add-tracker.php and update-tracker.php components...
Daily Habit Tracker Security Vulnerability
Daily Habit Tracker is a daily habit tracker by rems personal developer. A security vulnerability exists in Daily Habit Tracker version v.1.0, which stems from a cross-site scripting XSS vulnerability in components such as update-tracker.php...
CVE-2024-24496
The issue is in Daily Habit Tracker v1.0, where home.php , add-tracker.php , delete-tracker.php , and update-tracker.php suffer from broken access control, enabling unauthenticated manipulation of trackers. A remote attacker can access/modify trackers via these components, per multiple sources (R...
CVE-2024-24495
CVE-2024-24495 is a SQL injection vulnerability affecting Daily Habit Tracker version 1.0, arising from the delete-tracker.php endpoint. Remote attackers can craft a GET request to trigger arbitrary code execution due to insecure handling of input in the targeted PHP file. The Red Hat advisory co...
CVE-2024-24494
Daily Habit Tracker v1.0 is affected by a stored Cross-Site Scripting (XSS) vulnerability in add-tracker.php and update-tracker.php. The issue arises from multiple input parameters (day, exercise, pray, read_book, vitamins, laundry, alcohol, meat) that can be exploited to execute arbitrary script...
Daily Habit Tracker Authorization Issues Vulnerability
Daily Habit Tracker is a daily habit tracker by rems personal developer. Daily Habit Tracker version v.1.0 suffers from an authorization issue vulnerability that stems from allowing an attacker to manipulate the Tracker via components such as delete-tracker.php...
CVE-2024-24495
SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request...
CVE-2024-24495
SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request...
PT-2024-20420 · Unknown · Daily Habit Tracker
Name of the Vulnerable Software and Affected Versions: Daily Habit Tracker version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted GET request. This is due to a SQL Injection vulnerability in the delete-tracker.php file. Recommendations: For Daily Habit...
CVE-2024-24496
An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components...
CVE-2024-24496
An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components...
CVE-2024-24494
Cross Site Scripting vulnerability in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via the day, exercise, pray, readbook, vitamins, laundry, alcohol and meat parameters in the add-tracker.php and update-tracker.php components...
[SECURITY] [DSA 5614-1] zbar security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5614-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 03, 2024 https://www.debian.org/security/faq -...
[SECURITY] [DLA 3727-1] firefox-esr security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3727-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 31, 2024 https://wiki.debian.org/LTS -...
[SECURITY] [DSA 5611-1] glibc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5611-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 30, 2024 https://www.debian.org/security/faq -...
Exploit for CVE-2024-22890
CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Script...
