CVE-2023-49622 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' parameter of the materialbill.php?action=itemRelation resource does not validate the characters received and they are sent unfiltered to the database...

PT-2023-29180 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The lnm parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the...

Vulnerabilities fixed in Mattermost Server

Two vulnerabilities have been fixed in Mattermost Server. A unauthenticated malicious person can exploit the vulnerabilities to cause a denial-of-service. To do so, a malicious file needs to be uploaded or a malicious POST request needs to be sent be sent to the server. For the latter, no...

CVE-2019-11196

An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System IUMS allows unauthenticated, remote attackers to gain administrator privileges via the Teachers Web Panel TWP User ID or Password field. If exploited, the attackers could perform any action...

WordPress Accelerated Mobile Pages plugin <= 0.9.97.19 - Multiple Unauthenticated Vulnerabilities

Multiple Unauthenticated Vulnerabilities found in WordPress Accelerated Mobile Pages plugin versions = 0.9.97.19. Solution Update the WordPress Accelerated Mobile Pages plugin to the latest available version at least 0.9.97.20...

FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution

FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution Exploit Title: FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution Author: Gjoko 'LiquidWorm' Krstic @zeroscience Date: 2018-10-14 Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected version: Firmware: 1.32.16,...

Mako Web Server 2.5 - Multiple Vulnerabilities

Exploit for windows platform in category remote exploits + Source: http://hyp3rlinx.altervista.org/advisories/MAKO-WEB-SERVER-MULTIPLE-UNAUTHENTICATED-VULNERABILIITIES-SECURITEAM.txt + ISR: ApparitionSec Vulnerabilities Summary The following advisory describe three 3 vulnerabilities found in Mako...

Mako Web Server 2.5 - Multiple Vulnerabilities

SSD Beyond Security: https://blogs.securiteam.com/index.php/archives/3391 + Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MAKO-WEB-SERVER-MULTIPLE-UNAUTHENTICATED-VULNERABILIITIES-SECURITEAM.txt + ISR: ApparitionSec...