CVE-2020-19281: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field...

PT-2021-10321

Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A stored cross-site scripting XSS issue in the "/manage/loginusername" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field. This enables the executi...

Simple Water Refilling Station Management System SQL注入漏洞

Simple Water Refilling Station Management System is a simple water refilling station management system . A SQL injection vulnerability exists in the v1.0 version of Simple Water Refilling Station Management System, which originates from the application WaterRefilling/classes/Login.php, the userna...

The vulnerability of the phpList mailing list management software lies in the lack of security measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the phpList mailing list management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by creating a new username in the “Login Name” field of the...

Docker < 1.11.2 Privilege Escalation Vulnerability

Docker is prone to a privilege escalation vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

CVE-2021-35947

The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal path and the username of a public share by including invalid characters in the URL...

CVE-2021-35947

The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal path and the username of a public share by including invalid characters in the URL...

CVE-2021-35947

The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal path and the username of a public share by including invalid characters in the URL...

CVE-2020-7819

A SQL-Injection vulnerability in the nTracker USB Enterprisesecure USB management solution allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information...

CVE-2021-38840

SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...

Sql injection

SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...

CVE-2021-38840

SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...

Cross-site Scripting (XSS) - Reflected in kasuganosoras/pigeon

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

CVE-2020-7819: Exposure of Sensitive Information to an Unauthorized Actor

A SQL-Injection vulnerability in the nTracker USB Enterprisesecure USB management solution allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information...

CVE-2021-35947: Generation of Error Message Containing Sensitive Information

The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal path and the username of a public share by including invalid characters in the URL...

Simple Water Refilling Station Management System SQL注入漏洞

Simple Water Refilling Station Management System is a simple water refilling station management system . A SQL injection vulnerability exists in the v1.0 version of Simple Water Refilling Station Management System, which originates from the application WaterRefilling/classes/Login.php, the userna...

OnyakTech Comments Pro 信任管理问题漏洞

OnyakTech Comments Pro has been building DNN modules since 2003. A trust management issue vulnerability exists in OnyakTech Comments Pro that stems from a hard-coded username and user ID issue in the comment post request function. The vulnerability allows an attacker to control the username of a...

PT-2021-22295

Name of the Vulnerable Software and Affected Versions Simple Water Refilling Station Management System version 1.0 Description SQL Injection can occur via the username parameter in the water refilling/classes/Login.php file. This issue allows for potential SQL injection attacks. Recommendations F...

CVE-2021-38840: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...

Compro Technology IP Camera - (Multiple) Credential Disclosure Vulnerability

Exploit Title: Compro Technology IP Camera - 'Multiple' Credential Disclosure Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40380 There are unauthorized access vulnerabilitie...