CVE-2023-5634: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ArslanSoft Education Portal allows SQL Injection. This issue affects Education Portal: before v1.1...

Default configuration

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...

CVE-2022-42150

This CVE (CVE-2022-42150) affects TinyLab linux-lab v1.1-rc1 and cloud-lab v0.8-rc2 (also v1.1-rc1). The root cause is insecure permissions arising from the default configuration, which could enable Container Escape. Public details in connected sources corroborate the vulnerability and its impact...

CVE-2022-42150

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...

CVE-2023-37788

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service DoS via unspecified vectors...

CVE-2023-37788

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service DoS via unspecified vectors...

CVE-2023-37788

CVE-2023-37788 affects goproxy v1.1 and causes a Denial of Service via improper input validation. The trombone of detail across connected docs shows the issue being exploited by sending crafted HTTP requests that replace "/" with "*" to crash the goproxy server. The IBM RPA for Cloud Pak advisory...

CVE-2023-37788

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service DoS via unspecified vectors...

CVE-2020-20522

Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter...

Cross site scripting

Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter...

CVE-2021-33949

An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function...

CVE-2023-24241

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php...

Infokart 1.1 SQL Injection

==================================================================================================================================== | Title : Infokart v1.1 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | | Vendo...

CVE-2022-23367

Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting XSS vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection...

CVE-2022-23367

Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting XSS vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection...

CVE-2022-23367

Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting XSS vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection...

CVE-2022-23367

CVE-2022-23367 affects Fulusso v1.1. The vulnerability is a DOM-based cross-site scripting (XSS) in the file path /BindAccount/SuccessTips.js, arising from how open redirection is handled. This allows an attacker to inject malicious code into a victim user’s device via an open redirect mechanism....

Design/Logic Flaw

e2guardian v5.4.x = v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode i.e., acting as a proxy or a transparent proxy, with SSL MITM enabled, e2guardian, if built with OpenSSL v1.1.x, did not validate hostnames in certificates of the web servers...

CVE-2021-44273

e2guardian v5.4.x = v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode i.e., acting as a proxy or a transparent proxy, with SSL MITM enabled, e2guardian, if built with OpenSSL v1.1.x, did not validate hostnames in certificates of the web servers...

CVE-2021-43691

tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/loadfont.php. The variable src is coming from $SERVER"argv" then there is a path manipulation vulnerability...