1994 matches found
CVE-2020-26625
A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the 'userid' parameter after the login portal...
CVE-2023-50422
creationtimestamp| type| source ---|---|--- 2024-01-01 17:41:37+00:00| seen| https://t.me/ctinow/161386...
CVE-2023-46495
creationtimestamp| type| source ---|---|--- 2023-12-31 17:41:51+00:00| seen| https://t.me/ctinow/161147...
CVE-2023-46497
creationtimestamp| type| source ---|---|--- 2023-12-31 17:11:33+00:00| seen| https://t.me/ctinow/161140...
CVE-2023-31298
Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...
CVE-2023-31298
Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...
Cross site scripting
Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...
CVE-2023-7141
A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...
CVE-2023-31298
Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...
CVE-2023-31298
Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...
PT-2023-23284 · Unknown · Sesami Cash Point & Transport Optimizer
Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user. This is a Cross Site...
PT-2023-11748 · Gila Cms · Gila Cms
Name of the Vulnerable Software and Affected Versions: Gila CMS versions 1.15.4 and earlier Description: A SQL injection issue was discovered that allows a remote attacker to execute arbitrary web scripts via the user id parameter after the login portal. This enables the attacker to potentially...
PT-2023-27412 · Centralsquare · Centralsquare Click2Gov Building Permit
Name of the Vulnerable Software and Affected Versions: CentralSquare Click2Gov Building Permit versions prior to October 2023 Description: An issue was discovered in CentralSquare Click2Gov Building Permit, where lack of access control protections allows remote attackers to arbitrarily delete...
GHSA-WQQW-R8C5-J67C
creationtimestamp| type| source ---|---|--- 2023-12-22 08:51:31+00:00| seen| https://t.me/ctinow/158244...
PT-2023-32566 · Unknown · Mattermost
Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue is related to improper authorization in the "/plugins/focalboard/api/v2/users" endpoint, allowing an attacker who is a guest user and knows the ID of another user to obtain the...
The vulnerability of the ovl_copy_up_one() function in the fs/overlayfs/copy_up.c file of the OverlayFS file system in the Linux operating system allows a hacker to gain increased privileges.
The vulnerability of the ovlcopyupone function in the fs/overlayfs/copyup.c file of the OverlayFS file system in the Linux operating system is related to incorrect handling of stuid and stgid. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2023-28365 · Sap · Netweaver As Java Logon
Name of the Vulnerable Software and Affected Versions: NetWeaver AS Java Logon application version 7.50 Description: The issue allows an unauthenticated attacker to brute force the login functionality, identifying legitimate user ids. This has an impact on confidentiality, with no other impact on...
Huawei EulerOS: Security Advisory for postgresql (EulerOS-SA-2023-3146)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...