CVE-2023-43268

Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability...

CVE-2023-43268

Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability...

CVE-2023-43268

CVE-2023-43268 affects Deyue Remote Vehicle Management System v1.1, with a deserialization vulnerability identified in the software. The issue stems from unsafe deserialization handling in the system, enabling attacker-controlled data to be deserialized, which can impact confidentiality, integrit...

CVE-2023-43268

Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability...

CVE-2023-43268

Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability...

PT-2023-28750 · Deyue · Deyue Remote Vehicle Management System

Name of the Vulnerable Software and Affected Versions: Deyue Remote Vehicle Management System version 1.1 Description: A deserialization vulnerability was discovered in the system. Recommendations: For Deyue Remote Vehicle Management System version 1.1, at the moment, there is no information abou...

CVE-2023-42253

Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting XSS in Add Accounts via Invoice No, To, and Mammul...

CVE-2023-42253

Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting XSS in Add Accounts via Invoice No, To, and Mammul...

CVE-2023-42253

Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting XSS in Add Accounts via Invoice No, To, and Mammul...

SourceCodester Vehicle Management Cross-Site Scripting Vulnerability

SourceCodester Vehicle Management is a vehicle management software from SourceCodester, Inc. A security vulnerability exists in SourceCodester Vehicle Management version 1.0 that stems from the susceptibility to cross-site scripting XSS attacks when adding accounts via invoice numbers, recipients...

CVE-2023-42253

Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting XSS in Add Accounts via Invoice No, To, and Mammul...

CVE-2023-42253

Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting (XSS) in the Add Accounts workflow via Invoice No, To, and Mammul. The vulnerability is documented under CVE-2023-42253 across multiple sources, with general indication of XSS risk but without concrete exploitation details...

Vehicle Identification Numbers reveal driver data via telematics

There are many ways that data collection, and data availability, make less sense as the years pass by. This is frequently accompanied by a resistance to change, to improve these processes, because "thats how weve always done it". Sadly this is often the case even when those data collectors have...

CVE-2021-46075

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

Arbitrary File Download Vulnerability in Dahua In-vehicle Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2021-35881)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...

Arbitrary File Download Vulnerability in Dahua In-vehicle Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2021-35888)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...

Arbitrary File Download Vulnerability in Dahua In-vehicle Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2021-35887)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...

Arbitrary File Download Vulnerability in Dahua In-vehicle Integrated Management Platform of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...

File uploading loophole in intelligent management service platform for official vehicles

Founded in October 2007, China Telecom Hongxin Information Technology Co., Ltd. is a wholly-owned subsidiary of China Telecom Group with independent legal personality. The company is based on SDICT comprehensive intelligent information service provider. A file upload vulnerability exists in the...

Joomla VehicleManager 3.9.15 SQL Injection

Title: Joomla VehicleManager 3.9.15 - SQL injection Credit: Bilal KARDADOU Vendor: http://ordasoft.com/ URL: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/vehiclemanager-basic/ Product: 'Joomla VehicleManager 3.9.15' Developer: OrdaSoft Extension type: Plugin Last...