Wedding Management System SQL注入漏洞

Wedding Management System v1.0 is a wedding planning management system by John Paul Lim Gabule, a personal developer. clientassign.php?booking=31&userid=The page lacks validation of external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal sensiti...

Wedding Management System SQL注入漏洞

Wedding Management System v1.0 is a wedding planning management system by John Paul Lim Gabule, a personal developer, and a SQL injection vulnerability in /Wedding-Management/admin/. clientmanageaccountdetails.php?bookingid=31&userid page lacks validation for external input SQL statements, which...

GHSA-8PRC-58J4-M55Q Keycloak Unauthenticated Access

A flaw was found in the Keycloak REST API before version 8.0.0, implemented in Keycloak before 7.0.1 where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry...

CVE-2022-28187

creationtimestamp| type| source ---|---|--- 2022-05-18 00:28:03+00:00| seen| https://t.me/cibsecurity/42877...

GHSA-WFJ3-535M-P6FX Improper Input Validation in Jenkins

Jenkins versions 2.88 and earlier and 2.73.2 and earlier stores metadata related to 'people', which encompasses actual user accounts, as well as users appearing in SCM, in directories corresponding to the user ID on disk. These directories used the user ID for their name without additional...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/orders/vieworder.php?view=user&id = SQL injection attack...

Covid-19 Travel Pass Management System SQL注入漏洞

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. Covid-19 Travel Pass Management System v1.0 has a SQL injection vulnerability, which originates from ctpms/admin/?page=user/manageuser&id=lack of filtering and escaping for parameters, which can be exploited by...

CVE-2022-29987

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manageuser&id=...

CVE-2022-29395

creationtimestamp| type| source ---|---|--- 2022-05-11 00:43:04+00:00| seen| https://t.me/cibsecurity/42314...

CVE-2020-28629

creationtimestamp| type| source ---|---|--- 2022-04-18 20:23:35+00:00| seen| https://t.me/cibsecurity/41022...

CVE-2022-27960

Insecure permissions configured in the userid parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information...

CVE-2022-22998

creationtimestamp| type| source ---|---|--- 2022-03-21 18:50:15+00:00| seen| https://t.me/truesecator/2755 2022-03-22 12:21:26+00:00| seen| https://t.me/NeKaspersky/2021 2022-07-13 00:25:43+00:00| seen| https://t.me/cibsecurity/46102...

CVE-2022-0714

creationtimestamp| type| source ---|---|--- 2022-02-22 22:12:42+00:00| seen| https://t.me/cibsecurity/37898...

Northstar Club Management 安全漏洞

Northstar Club Management is a web-based solution from Northstar, Inc. that allows organizations to manage all elements of a club, such as memberships, guests, events, and more. A security vulnerability exists in Northstar Club Management version 6.3, which stems from a lack of valid filtering an...

USN-5244-1 dbus vulnerability

Daniel Onaca discovered that DBus contained a use-after-free vulnerability, caused by the incorrect handling of usernames sharing the same UID. An attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service...

CVE-2021-4182

creationtimestamp| type| source ---|---|--- 2021-12-31 00:34:27+00:00| seen| https://t.me/cibsecurity/34771...

The vulnerability of the application’s web interface for automated internal and external IT audits. McAfee Policy Auditor allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the application’s web interface for automating internal and external IT audits, as provided by McAfee Policy Auditor, is related to the failure to protect the structure of the web page when processing the UID request parameter. Exploiting this vulnerability allows a malicious...

CVE-2021-42115

Missing HTTPOnly flag in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 allows an unauthenticated remote attacker to escalate privileges from unauthenticated to authenticated user via stealing and injecting the session- independent and static cookie...

CVE-2021-31852

A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the UID request parameter. The malicious script is reflected unmodified into the Policy Auditor web-based interface which coul...

McAfee Policy Auditor 跨站脚本漏洞

McAfee Policy Auditor is an agent-based IT assessment solution that leverages the Security Content Automation Protocol SCAP to automate the processes required for internal and external IT and security audits.A reflective cross-site scripting vulnerability exists in versions of McAfee Policy Audit...