Employee Task Management System SQL Injection Vulnerability

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the parameter userid that can result in an sql injection...

GHSA-3J27-563V-28WF

creationtimestamp| type| source ---|---|--- 2024-03-06 18:16:34+00:00| seen| https://t.me/ctinow/201597...

GHSA-RV4H-M4WC-V99W

creationtimestamp| type| source ---|---|--- 2024-03-01 21:21:46+00:00| seen| https://t.me/ctinow/197995...

GHSA-3HRR-XWVG-HXVR

creationtimestamp| type| source ---|---|--- 2024-02-29 21:26:58+00:00| seen| https://t.me/ctinow/197022...

RHSA-2024:1017

creationtimestamp| type| source ---|---|--- 2024-02-28 13:17:07+00:00| seen| https://t.me/ctinow/195404...

GHSA-5JJQ-8CVJ-V6M9

creationtimestamp| type| source ---|---|--- 2024-02-21 01:06:49+00:00| seen| https://t.me/ctinow/189064 2024-02-21 13:05:31+00:00| published-proof-of-concept| https://t.me/arpsyndicate/3753...

Open-Xchange App Suite Security Vulnerability

Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite that stems from a user ID reference not properly cleaned up as mentioned in the documentation notes, where script code could be injected...

GHSA-RQ95-XF66-J689

creationtimestamp| type| source ---|---|--- 2024-02-01 00:36:13+00:00| seen| https://t.me/ctinow/177221...

RHSA-2024:0489

creationtimestamp| type| source ---|---|--- 2024-01-31 18:16:40+00:00| seen| https://t.me/ctinow/176942...

CVE-2024-0988

A vulnerability classified as critical was found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this vulnerability is the function checklogin of the file /application/index/common.php. The manipulation of the argument AppUserid/AppuserToken leads to improper authentication. The explo...

CVE-2023-28900 Nickname Disclosure on the Backend Automotive Server

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number...

Omniauth::MicrosoftGraph Account takeover (nOAuth)

Summary The implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases when the email is used as a trusted user identifier...

CVE-2024-21632 omniauth-microsoft_graph vulnerable to account takeover (nOAuth)

omniauth-microsoftgraph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases...

CVE-2023-41998

creationtimestamp| type| source ---|---|--- 2023-12-17 09:37:23+00:00| seen| https://t.me/ctinow/155552...

GHSA-MWWQ-V92J-38XR

creationtimestamp| type| source ---|---|--- 2023-11-29 16:58:47+00:00| seen| https://t.me/arpsyndicate/773...

Loan Management System SQL Injection Vulnerability

Loan Management System is a loan management system by razormist individual developers. A SQL injection vulnerability exists in Loan Management System version 1.0, which stems from an incorrect manipulation of the parameter userid that can lead to sql injection...

Symfony possible session fixation vulnerability

Description SessionStrategyListener does not always migrate the session after a successful login. It only migrate the session when the logged-in user identifier changes. In some use cases, the user identifier doesn't change between the verification phase and the successful login, while the token...

DEBIAN-CVE-2023-46733

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 5.4.21 and 6.2.7 and prior to versions 5.4.31 and 6.3.8, SessionStrategyListener does not migrate the session after every successful login. It does so only in case the logged in...

Symfony Security Vulnerabilities

Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony, Inc. A security vulnerability exists in Symfony that stems from a user identifier not changing between the authentication phase and a successful login...

Best Courier Management System Security Vulnerability

Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System version v.1.0 that could allow a remote attacker to execute arbitrary code and prompt for privileges via the userID parameter using a...