12573 matches found
Oracle Linux 8 : tigervnc (ELSA-2024-3261)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3261 advisory. - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents Resolves: RHEL-30755 - Fix CVE-2024-31083...
CVE-2024-35511
phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/index.php...
CVE-2024-35511
phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/index.php...
Oracle Linux 8 : openssh (ELSA-2024-3166)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3166 advisory. - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 Tenable has extracted the preceding description block directly from the Oracl...
Exploit for SQL Injection in Phpgurukul Men_Salon_Management_System
PHPGurukul Men Salon Management System 2.0 + Welcome to the PH...
PT-2024-15256 · Zzdevelop · Lenosp
Name of the Vulnerable Software and Affected Versions: zzdevelop lenosp versions up to 20230831 Description: A disputed issue affects an unknown part of the Adduser Page component. The manipulation of the username argument with the input alert1 leads to cross-site scripting. This can be initiated...
CVE-2024-5227
TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability...
Event Registration System SQL注入漏洞
Event Registration System is a QR code based event registration system by Carlo Montero, an individual developer. An SQL injection vulnerability exists in Event Registration System version 1.0, which originates from an unknown function in Portal.php that causes SQL injection via the...
PT-2024-34548 · Unknown · Sourcecodester Event Registration System
Name of the Vulnerable Software and Affected Versions: SourceCodester Event Registration System version 1.0 Description: A critical issue was found in the SourceCodester Event Registration System, affecting an unknown part of the file portal.php. The manipulation of the username and password...
PT-2024-34603 · Unknown · Phpgurukul Directory Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 1.0 Description: A critical issue affects the processing of the file /admin/index.php, where the manipulation of the username argument leads to SQL injection. The attack can be initiated remotely...
PT-2024-40250 · Passbolt · Passbolt
Name of the Vulnerable Software and Affected Versions: Passbolt affected versions not specified Description: The issue allows a user to inject bash code during the installation stage of Passbolt, as the system does not perform escaping or verification on the input provided for the username, e-mai...
Tenant Limited 1.0 SQL Injection
Titles: TENANT-LIMITED-1.0 SQLi Author: nu11secur1ty Date: 05/20/2024 Vendor: https://mayurik.com/ Software: https://www.sourcecodester.com/php/17375/best-courier-management-system-project-php.html Reference: https://portswigger.net/web-security/sql-injection Description: The username parameter...
Event Registration System SQL注入漏洞
Event Registration System is a QR code based event registration system by Carlo Montero's personal developer. An SQL injection vulnerability exists in Event Registration System version 1.0, which originates from an unknown function in /admin/login.php that causes SQL injection via the...
Directory Management System SQL注入漏洞
Directory Management System is a directory management system by the individual developer Anuj Kumar. A SQL injection vulnerability exists in Directory Management System version 1.0, which originates from an unknown function in /admin/index.php that causes SQL injection via the parameter username...
Simple Inventory System SQL注入漏洞
Simple Inventory System is a simple inventory system by argie individual developer. SourceCodester Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from the parameter username in the file login.php...
PT-2024-34483 · Unknown · Sourcecodester Simple Inventory System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Inventory System version 1.0 Description: A critical issue has been found in the SourceCodester Simple Inventory System, affecting an unknown functionality of the file login.php. The manipulation of the username argument...
Authentication Bypass
friendsofsymfony/user-bundle is vulnerable to Authentication Bypass. The vulnerability is due to an insecure user refresh implementation due to using the primary key instead of the username, which can result in authentication bypass if users are allowed to change usernames...
Online Course Registration System 安全漏洞
Online Course Registration System is an online course registration system by the individual developer ANUJ KUMAR. A security vulnerability exists in PHPGurukul Online Course Registration System version 3.1, which originates from the parameters username/password in the file /admin/index.php that c...
GitLab 8.0 < 13.11.6 / 13.12 < 13.12.6 / 14.0 < 14.0.2 (CVE-2021-22231)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username. CVE-2021-22231 No...
GitLab < 12.10.13 (CVE-2020-13321)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be added. CVE-2020-13321 Note that Nessus has not tested for...