CVE-2024-41741

IBM TXSeries for Multiplatforms 10.1 could allow an attacker to determine valid usernames due to an observable timing discrepancy which could be used in further attacks against the system...

CVE-2024-41741

IBM TXSeries for Multiplatforms 10.1 is affected by CVE-2024-41741, where an observable timing discrepancy could allow an attacker to determine valid usernames, enabling further attacks. The affected component is the authentication/username handling in TXSeries 10.1; impact is information disclos...

PT-2024-29549

Name of the Vulnerable Software and Affected Versions IBM TXSeries for Multiplatforms version 10.1 Description The issue allows an attacker to determine valid usernames due to an observable timing discrepancy, which could be used in further attacks against the system. Recommendations For IBM...

CVE-2024-41741: Observable Timing Discrepancy

IBM TXSeries for Multiplatforms 10.1 could allow an attacker to determine valid usernames due to an observable timing discrepancy which could be used in further attacks against the system...

IBM TXSeries for Multiplatforms security vulnerabilities

IBM TXSeries for Multiplatforms is a transaction monitoring and management software product from International Business Machines IBM designed to support distributed transaction processing on multiple platforms. A security vulnerability exists in IBM TXSeries for Multiplatforms version 10.1, which...

CVE-2024-51065

Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...

CVE-2024-51065

Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...

Security Bulletin: IBM TXSeries for Multiplatforms is vulnerable to attacks attempting to obtain sensitive information or determine valid usernames.

Summary Webpages that are shipped as part of IBM TXSeries for Multiplatforms are vulnerable to attacks attempting to obtain sensitive information or determine valid usernames. Updates to IBM TXSeries for Multiplatforms have been released to address this vulnerability. Vulnerability Details...

CVE-2024-51065

Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...

CVE-2024-51065: Improper Neutralization of Special Elements used in an SQL Command

Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...

PT-2024-34511

Name of the Vulnerable Software and Affected Versions: Phpgurukul Beauty Parlour Management System version 1.1 Description: The issue is related to SQL Injection in the admin/index.php file via the username parameter. This allows for potential exploitation of the system. Recommendations: For...

CVE-2024-51065

Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection within the admin/index.php file. The flaw exists in the username parameter, which allows for potential exploitation of the system. To mitigate this risk, it is recommended to restrict access to the admin/index.php fil...

CVE-2024-51065

Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...

ABB Cylon Aspect 3.08.01 (jsonProxy.php) Username Enumeration

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The jsonProxy.php endpoint on the ABB BMS/BAS controller is vulnerabl...

ABB Cylon Aspect 3.08.01 jsonProxy.php Username Enumeration Vulnerability

ABB Cylon Aspect version 3.08.01 is vulnerable to username enumeration in the jsonProxy.php endpoint. An unauthenticated attacker can interact with the UserManager servlet to enumerate valid usernames on the system. Since jsonProxy.php proxies requests to internal services without requiring...

ABB Cylon Aspect 3.08.01 jsonProxy.php Username Enumeration

ABB Cylon Aspect 3.08.01 jsonProxy.php Username Enumeration Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy management and...

CVE-2024-9989 Crypto <= 2.18 - Authentication Bypass via log_in

The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.18. This is due to a limited arbitrary method call to 'cryptoconnectajaxprocess::login' function in the 'cryptoconnectajaxprocess' function. This makes it possible for unauthenticated...

CVE-2024-10432

A vulnerability has been found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument username leads to sql injection. The attack can be launched...

CVE-2024-10432: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument username leads to sql injection. The attack can be launched...

CVE-2024-10449: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...