1971 matches found
CVE-2023-0111
creationtimestamp| type| source ---|---|--- 2023-01-07 07:25:37+00:00| seen| https://t.me/cibsecurity/56106 2025-04-09 15:47:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11100...
CVE-2022-3911
creationtimestamp| type| source ---|---|--- 2023-01-03 00:29:44+00:00| seen| https://t.me/cibsecurity/55770 2025-04-10 18:49:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11317...
Admin is able to ARCHIVE OWN Account leads to Deactivate ADMIN Account
Description As fer the Flow Admin can't ARCHIVE OWN account . i was able to ARCHIVE ADMIN OWN Account by intercept the request and change ID Value to Admin. which leads to ARCHIVED the ADMIN Account , :/ Please Restored it Might Be possible to DELETE Admin Account too , after ARCHIVE Account it's...
CVE-2022-4156
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the userid POST parameter before concatenating it to an SQL query in ajax-functions-backend.php. This may allow malicious users with at least author privilege to leak sensitive...
PT-2022-25938 · WordPress · Contest Gallery Pro +1
Name of the Vulnerable Software and Affected Versions: Contest Gallery WordPress plugin versions prior to 19.1.5.1 Contest Gallery Pro WordPress plugin versions prior to 19.1.5.1 Description: The issue arises from the failure to escape the user id POST parameter before it is concatenated to an SQ...
PT-2022-25930 · WordPress · Contest Gallery Pro +1
Name of the Vulnerable Software and Affected Versions: Contest Gallery WordPress plugin versions prior to 19.1.5.1 Contest Gallery Pro WordPress plugin versions prior to 19.1.5.1 Description: The issue arises from the failure to escape the wp user id GET parameter before it is concatenated to an...
WordPress Plugin Contest Gallery SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2022-36221
creationtimestamp| type| source ---|---|--- 2022-12-21 22:13:16+00:00| seen| https://t.me/cibsecurity/55085...
Facepay 安全漏洞
Facepay is an app by Andrew Chan personal developer. It is used for face payments. A security vulnerability exists in Facepay version 1.0, which stems from an unknown function in the file /face-recognition-php/facepay-master/camera.php, where the operation of the parameter userId leads to...
CVE-2022-3520
creationtimestamp| type| source ---|---|--- 2022-12-02 22:37:22+00:00| seen| https://t.me/cibsecurity/53846...
CVE-2022-44258
creationtimestamp| type| source ---|---|--- 2022-11-23 18:14:08+00:00| seen| https://t.me/cibsecurity/53429 2025-04-25 20:07:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13510...
PYSEC-2022-42987
CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts...
CLSA-2022-1668117586 Fix CVE(s): CVE-2019-2386
SECURITY UPDATE: After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones - debian/patches/CVE-2019-2386.patch: Validate...
CVE-2022-42905
creationtimestamp| type| source ---|---|--- 2022-11-07 02:33:44+00:00| seen| https://t.me/cibsecurity/52577 2023-01-17 10:37:08+00:00| seen| https://t.me/techb0ltGenona/3521 2024-01-26 18:07:14+00:00| seen| https://t.me/arpsyndicate/3026 2026-09-01 20:01:05+00:00| seen|...
DEBIAN-CVE-2022-40284
A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon...
PT-2022-26808 · Unknown · Canteen Management System
Name of the Vulnerable Software and Affected Versions: Canteen Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the userid parameter at the "/php action/fetchSelectedUser.php" API endpoint. Recommendations: F...
The vulnerability of the Fortinet FortiNAC access control device lies in its lack of measures to protect the website structure, allowing attackers to execute cross-site scripting attacks.
The vulnerability of the Fortinet FortiNAC network access control device is related to the lack of protection for the website structure when processing the User ID parameter for the administrator. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
CVE-2022-40178
creationtimestamp| type| source ---|---|--- 2022-10-11 14:25:57+00:00| seen| https://t.me/cibsecurity/51107...
PT-2022-21134 · Zinc · Zinc
Name of the Vulnerable Software and Affected Versions: Zinc versions v0.1.9 through v0.3.1 Description: The issue is related to Stored Cross-Site Scripting when using the delete user functionality. When an authenticated user deletes a user having a XSS payload in the user id field, the javascript...