126 matches found
EUVD-2025-36330
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script...
CVE-2025-36007
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script...
CVE-2025-36007
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script...
CVE-2025-36007 IBM QRadar SIEM incorrect privilege assignment
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script...
CVE-2025-36007 IBM QRadar SIEM incorrect privilege assignment
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script...
CVE-2025-36007
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script. The issue affects the App Framework privilege handling and could allow an authenticated attacker with low privileges to escalate with...
PT-2025-44011
Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 Description IBM QRadar SIEM versions 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 contains a flaw related to improper privilege assignment to an update script,...
IBM QRadar SIEM 安全漏洞
IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...
EUVD-2025-26314
Malicious code in bioql PyPI...
EUVD-2022-52766
Malicious code in bioql PyPI...
CVE-2025-34228
Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 VA/SaaS deployments contain a server-side request forgery SSRF vulnerability. The /var/www/app/consolerelease/lexmark/update.php script is reachable from the internet...
PT-2025-39891
Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 Vasion Print formerly PrinterLogic Application versions prior to 25.1.1413 Description The software contains a server-side request forgery SSRF vulnerability...
Vasion Print Virtual Appliance Host 安全漏洞
Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 25.1.102, which originates from an unvalidated /var/www/app/consolerelease/lexmark/update.php script that does not properly...
CVE-2025-10626
A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /admin/updates3.php. This manipulation of the argument credits causes sql injection. Remote exploitation of the attack is possible. The exploit has been...
SourceCodester Online Exam Form Submission 安全漏洞
SourceCodester Online Exam Form Submission is a SourceCodester open source online exam submission system. A security vulnerability exists in SourceCodester Online Exam Form Submission version 1.0, which stems from an incorrect manipulation of the parameter credits in the file /admin/updates3.php,...
CVE-2025-10626
CVE-2025-10626 affects SourceCodester Online Exam Form Submission 1.0. A flaw in the file /admin/update_s3.php allows manipulation of the credits parameter, causing a SQL injection. Remote exploitation is possible, and the exploit has been published. Connected sources corroborate the SQL injectio...
Awesome-Bugbounty-Writeups
This is a curated list of bug bounty writeups, specifically focusing on various types of web application vulnerabilities. The repository is organized by vulnerability type, with sections for Cross-Site Scripting XSS, Cross-Site Request Forgery CSRF, Clickjacking, Local File Inclusion LFI, Subdoma...
code-projects Exam Form Submission 注入漏洞
Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter credits in file /admin/updates7.php. An attacker can exploit this vulnerability to execute illegal SQL...
Exam Form Submission update_s3.php File SQL Injection Vulnerability
Exam Form Submission is an exam form. Exam Form Submission has a SQL injection vulnerability that stems from improper handling of the credits parameter in the /admin/updates3.php file. No details of the vulnerability are provided at this time...
Code-Projects Exam Form Submission 注入漏洞
Code-Projects Exam Form Submission is an open source exam form from Code-Projects. An injection vulnerability exists in Code-Projects Exam Form Submission version 1.0, which originates from SQL injection due to the operation of the parameter credits in the file /admin/updates8.php...