9029 matches found
CVE-2023-7123
A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=savemedicine. The manipulation of the argument id/name/description leads to sql injection. The attack may...
Sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=savemedicine. The manipulation of the argument id/name/description leads to sql injection. The attack may...
Medicine Tracking System Security Vulnerability
Medicine Tracking System is a medicine tracking system. A security vulnerability exists in SourceCodester Medicine Tracking System version 1.0 due to a path traversal vulnerability in the parameter page...
PT-2023-32895 · Unknown · Sourcecodester Medicine Tracker System
Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracking System version 1.0 Description: A critical issue affects some unknown processing in the system. The manipulation of the page argument leads to path traversal, specifically '../filedir'. This can be initiated...
CVE-2023-7134: Path Traversal: '../filedir'
A vulnerability was found in SourceCodester Medicine Tracking System 1.0. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument page leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to...
CVE-2023-7123 SourceCodester Medicine Tracking System sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=savemedicine. The manipulation of the argument id/name/description leads to sql injection. The attack may...
CVE-2023-7123
CVE-2023-7123 affects SourceCodester Medicine Tracking System 1.0. A SQL injection vulnerability exists in the handling of the /classes/Master.php? f=save_medicine path, enabling manipulation of the id/name/description parameters. The issue is network-exploitable with low attack complexity and no...
This Clever New Idea Could Fix AirTag Stalking While Maximizing Privacy
Apple updated its location-tracking system in an attempt to cut down on AirTag abuse while still preserving privacy. Researchers think they’ve found a better balance...
CVE-2023-7123: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=savemedicine. The manipulation of the argument id/name/description leads to sql injection. The attack may...
Improper Access Control
gitlab:sid is vulnerable of Improper Access Control. The vulnerability due to leak the sentry token by changing the configured URL in the Sentry error tracking settings page. It allow an attacker to leak sentry token under specific circumstances...
CVE-2023-49085
creationtimestamp| type| source ---|---|--- 2023-12-22 18:23:25+00:00| seen| https://t.me/ctinow/158512 2023-12-28 12:41:20+00:00| published-proof-of-concept| https://t.me/ptswarm/195 2023-12-29 21:17:21+00:00| seen| https://t.me/ctinow/160688 2024-02-02 17:02:14+00:00| seen|...
airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2023-50783 via apache-airflow (1.8.2)
apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2023-50783 Source advisory: OSV:GHSA-5938-79HG-XH3Q...
data-tracking (1.7.3) potentially affected by CVE-2023-50783 via apache-airflow (1.9.0)
apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2023-50783 Source advisory: OSV:GHSA-5938-79HG-XH3Q...
airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2023-48291 via apache-airflow (1.8.2)
apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2023-48291 Source advisory: OSV:GHSA-8F57-WCMG-4JMH...
data-tracking (1.7.3) potentially affected by CVE-2023-48291 via apache-airflow (1.9.0)
apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2023-48291 Source advisory: OSV:GHSA-8F57-WCMG-4JMH...
airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2023-50783 via apache-airflow (1.8.2)
apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2023-50783 Source advisory: OSV:PYSEC-2023-267...
airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2023-42792 +1 more via apache-airflow (1.8.2)
apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2023-42792, CVE-2023-48291 Source advisory: OSV:PYSEC-2023-265...
data-tracking (1.7.3) potentially affected by CVE-2023-50783 via apache-airflow (1.9.0)
apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2023-50783 Source advisory: OSV:PYSEC-2023-267...
data-tracking (1.7.3) potentially affected by CVE-2023-42792 +1 more via apache-airflow (1.9.0)
apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2023-42792, CVE-2023-48291 Source advisory: OSV:PYSEC-2023-265...
Incorrect fee calculation may lead to borrower overpaying
Lines of code Vulnerability details Summary Fees are incorrectly snapshotted when a new lien is created, potentially leading to a fee overpay. Impact The Particle LAMM protocol tracks fees using the same internal tracking built in Uniswap V3. Positions in Uniswap V3 contain a couple of variables...