12648 matches found
CVE-2023-38428
An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read...
CVE-2023-3693 SourceCodester Life Insurance Management System login.php sql injection
A vulnerability classified as critical was found in SourceCodester Life Insurance Management System 1.0. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been...
Insurance Management System SQL注入漏洞
Insurance Management System is an insurance management system by Angel Jude Reyes Suarez, an individual developer. A SQL injection vulnerability exists in SourceCodester Life Insurance Management System version 1.0, which stems from unknown code in the login.php file that causes a sql injection v...
PT-2023-25741 · Sourcecodester · Sourcecodester Insurance Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Life Insurance Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Life Insurance Management System. This issue affects the file login.php and is caused by the manipulation of the...
Business Logic Error - letting the Name Field blank
Hello, I was able to bypass the restriction for setting an admin username and letting the username via spaces blank. Let's have a look. As you can see the name is with a red star and therefore required to be filled. Now we will add2 spaces and let the username blank and save. As you can see all t...
Unable to login to Citrix Cloud - Error: "incorrect username, password or token"
Unable to login to Citrix Cloud to access virtualized app. The error message "incorrect username, password or token" is displayed. The process of setting up MFA works perfectly, but once Authenticator App is paired and actual login attempted, it always fails...
CVE-2023-3642
A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/ of the component HTTP POST Request Handler. The manipulation of the argument...
Cross site scripting
A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/ of the component HTTP POST Request Handler. The manipulation of the argument...
GZ Scripts Vacation Rental Website 跨站脚本漏洞
GZScripts is a script from GZScripts, Inc. A cross-site scripting vulnerability exists in GZ Scripts Vacation Rental Website version 1.8, which stems from the parameter username/title/comment in the file /VacationRentalWebsite/property/8/ad-has-principes/ that can result in cross-site scripting...
Published apps and desktop shows error "The user name and password is incorrect"
The user name or password is incorrect at System.Security.Principal.WindowsIdentity.KerbS4ULogonString upn, SafeAccessTokenHandle& safeTokenHandle at System.Security.Principal.WindowsIdentity..ctorString sUserPrincipalName, String type at System.Security.Principal.WindowsIdentity..ctorString...
PT-2023-25571 · Gz Scripts · Gz Scripts Vacation Rental Website
Name of the Vulnerable Software and Affected Versions: GZ Scripts Vacation Rental Website version 1.8 Description: A vulnerability was found in the HTTP POST Request Handler component, affecting some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/. The...
CVE-2023-3617
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
Best pos management system SQL注入漏洞
Best pos management system is a best pos management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Best POS Management System version 1.0, which stems from the parameter username in the file adminclass.php that can lead to sql injection...
PT-2023-3962
Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018u16 and earlier Adobe ColdFusion versions 2021u6 and earlier Adobe ColdFusion versions 2023.0.0.330468 and earlier Description The issue is related to an Improper Access Control vulnerability that could result in ...
CVE-2023-35698
Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login attempt...
PT-2023-25281 · Sick · Sick Icr890-4
Name of the Vulnerable Software and Affected Versions: SICK ICR890-4 affected versions not specified Description: The issue concerns an observable response discrepancy that could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login...
The vulnerability of the Active Directory Integration/LDAP Integration plugin for WordPress management systems arises from the failure to properly neutralize special elements in LDAP requests. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Active Directory Integration/LDAP Integration plugin for WordPress content management systems is related to the lack of measures taken to neutralize special elements in LDAP requests when processing the username parameter. Exploiting this vulnerability can allow an attack...
CVE-2023-37308
Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...