12634 matches found
PYSEC-2021-384
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if createusers=True and t...
CVE-2021-41194 Improper Access Control in jupyterhub-firstuseauthenticator
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if createusers=True and t...
CVE-2021-37808
SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the 1 category, 2 subcategory, 3 sucatdescription, and 4 username parameters, the server response is about N seconds delay respectively which mean it is vulnerable to MySQL Blind Time Based. An attacker can...
Sql injection
An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username in lognin.php...
CVE-2021-37803
CVE-2021-37803: A SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0, exploitable via the username parameter in login.php (lognin.php). The issue is exposed over network with no authentication required (per CVSS v3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H...
CVE-2021-37803
An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username in lognin.php...
The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the username parameter...
The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the index.php USERNAME parameter...
PT-2021-21878 · Unknown · News Portal Project
Name of the Vulnerable Software and Affected Versions: News Portal Project version 3.1 Description: SQL Injection vulnerabilities exist in the News Portal Project via the category, subcategory, sucatdescription, and username parameters. The server response is delayed by about N seconds, indicatin...
News Portal Project SQL注入漏洞
News Portal Project is an open source news portal project . News Portal Project in version 3.1, there is a SQL injection vulnerability , the vulnerability stems from the application's category, subcategory, sucatdescription, username parameters lack of validation of external input SQL statements...
Facebook sues Ukrainian man for scraping and selling 178m users’ data
By Deeba Ahmed Facebook tracked down the programmer after he mistakenly used the same username and contact information on email and job portals. This is a post from HackRead.com Read the original post: Facebook sues Ukrainian man for scraping and selling 178m users data...
CVE-2020-28968
Draytek VigorAP 1000C contains a stored cross-site scripting XSS vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field...
Cross site scripting
Draytek VigorAP 1000C contains a stored cross-site scripting XSS vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field...
CVE-2021-42536
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables...
CVE-2021-42536
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables...
CVE-2021-42536
The CVE-2021-42536 vulnerability affects Emerson WirelessHART Gateway devices. It allows disclosure of peer usernames and passwords by permitting all users to read global variables, impacting confidentiality (CVE-2021-42536). Reported impacts include high confidentiality exposure with network-rem...
CVE-2021-42536 Emerson WirelessHART Gateway
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables...
PT-2021-23558 · Sqlite Consortium +2 · Sqlite +2
Name of the Vulnerable Software and Affected Versions: The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite affected versions not specified Description: The issue concerns a remote SQL injection bypass authentication vulnerability for the admin account. The username parameter fr...
Draytek VigorAP 1000C 跨站脚本漏洞
DrayTek Corporation Draytek VigorAp is a wireless access point from DrayTek Corporation. The Draytek VigorAP 1000C suffers from a cross-site scripting vulnerability that stems from the software's lack of effective filtering and validation of user uploaded parameters in the RADIUS Settings - RADIU...
