13758 matches found
Alfresco Software Alfresco Community Edition 资源管理错误漏洞
Alfresco Community Edition is the U.S. Alfresco's set of open source enterprise content management system community edition. The system includes document management, office collaboration, and other features. A resource management error vulnerability exists in Alfresco Community Edition that stems...
Improper Access Control in jupyterhub-firstuseauthenticator
Impact When JupyterHub is used with FirstUseAuthenticator, the vulnerability allows unauthorized access to any user's account if createusers=True and the username is known or guessed. Patches Upgrade to jupyterhub-firstuseauthenticator to 1.0, or apply patch...
CVE-2021-41194
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if createusers=True and t...
PYSEC-2021-384
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if createusers=True and t...
CVE-2021-41194 Improper Access Control in jupyterhub-firstuseauthenticator
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if createusers=True and t...
CVE-2021-37808
SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the 1 category, 2 subcategory, 3 sucatdescription, and 4 username parameters, the server response is about N seconds delay respectively which mean it is vulnerable to MySQL Blind Time Based. An attacker can...
Sql injection
An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username in lognin.php...
CVE-2021-37803
CVE-2021-37803: A SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0, exploitable via the username parameter in login.php (lognin.php). The issue is exposed over network with no authentication required (per CVSS v3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H...
CVE-2021-37803
An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username in lognin.php...
The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the index.php USERNAME parameter...
The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the username parameter...
PT-2021-21878 · Unknown · News Portal Project
Name of the Vulnerable Software and Affected Versions: News Portal Project version 3.1 Description: SQL Injection vulnerabilities exist in the News Portal Project via the category, subcategory, sucatdescription, and username parameters. The server response is delayed by about N seconds, indicatin...
News Portal Project SQL注入漏洞
News Portal Project is an open source news portal project . News Portal Project in version 3.1, there is a SQL injection vulnerability , the vulnerability stems from the application's category, subcategory, sucatdescription, username parameters lack of validation of external input SQL statements...
Facebook sues Ukrainian man for scraping and selling 178m users’ data
By Deeba Ahmed Facebook tracked down the programmer after he mistakenly used the same username and contact information on email and job portals. This is a post from HackRead.com Read the original post: Facebook sues Ukrainian man for scraping and selling 178m users data...
CVE-2020-28968
Draytek VigorAP 1000C contains a stored cross-site scripting XSS vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field...
Cross site scripting
Draytek VigorAP 1000C contains a stored cross-site scripting XSS vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field...
CVE-2021-42536
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables...
CVE-2021-42536
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables...
CVE-2021-42536
The CVE-2021-42536 vulnerability affects Emerson WirelessHART Gateway devices. It allows disclosure of peer usernames and passwords by permitting all users to read global variables, impacting confidentiality (CVE-2021-42536). Reported impacts include high confidentiality exposure with network-rem...