CVE-2023-32362

Error handling was changed to not reveal sensitive information. This issue is fixed in macOS Ventura 13.3. A website may be able to track sensitive user information...

Information disclosure

Error handling was changed to not reveal sensitive information. This issue is fixed in macOS Ventura 13.3. A website may be able to track sensitive user information...

CVE-2023-32362

Error handling was changed to not reveal sensitive information. This issue is fixed in macOS Ventura 13.3. A website may be able to track sensitive user information...

CVE-2023-32362

Error handling was changed to not reveal sensitive information. This issue is fixed in macOS Ventura 13.3. A website may be able to track sensitive user information...

CVE-2023-32362

CVE-2023-32362 affects macOS Ventura 13.3 where error handling was altered to avoid revealing sensitive information. The vulnerability could allow a website to track sensitive user information. The issue is fixed in macOS Ventura 13.3. Remediation: update to macOS Ventura 13.3 or later. The Conne...

Improperly tracking asset reserve for WETH

Lines of code Vulnerability details Impact Function RdpxV2Corewithdraw lets delegate owners withdraw their unused WETH. However, withdrawn amount is not deducted from totalWethDelegated, which causes WETH asset reserve tracked improperly. The impacts could be: 1. Function sync gets reverted when...

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.3, which stems from a website that may be able to track sensitive user information...

CVE-2023-35068

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904...

CVE-2023-35068

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BMA Personnel Tracking System allows SQL Injection.This issue affects Personnel Tracking System: before 20230904...

CVE-2023-35068

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BMA Personnel Tracking System allows SQL Injection.This issue affects Personnel Tracking System: before 20230904...

CVE-2023-35068 SQLi in BMAs Personnel Tracking System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904...

CVE-2023-35068

CVE-2023-35068 affects BMA Personnel Tracking System up to version 20230904, with a SQL Injection due to improper neutralization of input. CVSS: 3.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8 CRITICAL). Connected sources confirm the issue is a SQLi vulnerability in the BMA Personnel Tracking Syste...

CVE-2023-35068 SQLi in BMAs Personnel Tracking System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904...

CVE-2023-27954

A vulnerability was found in WebKitGTK. This security issue leads to tracking sensitive user information via a website. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and...

BMA Personnel Tracking System SQL Injection Vulnerability

BMA Personnel Tracking System is a personnel tracking system from BMA Turkey. A SQL injection vulnerability exists in versions of BMA Personnel Tracking System prior to 20230904, which stems from vulnerability to SQL injection attacks...

PT-2023-25124 · Unknown · Bma Personnel Tracking System

Name of the Vulnerable Software and Affected Versions: BMA Personnel Tracking System versions before 20230904 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The...

CVE-2023-33831

creationtimestamp| type| source ---|---|--- 2023-09-04 21:26:55+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8967 2023-09-07 08:00:59+00:00| published-proof-of-concept| https://t.me/dilagrafie/3182 2023-09-19 00:28:42+00:00| seen| https://t.me/cibsecurity/70672...

CVE-2023-4216

The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the fileurl parameter when importing a CSV file, allowing high privilege users with the managewoocommerce capability to access any file on the web server via a Traversal attack. The content retrieved is however...

CVE-2023-4216

The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the fileurl parameter when importing a CSV file, allowing high privilege users with the managewoocommerce capability to access any file on the web server via a Traversal attack. The content retrieved is however...