Aegon Life SQL Injection Vulnerability

Aegon Life is an application from Aegon Life. A SQL injection vulnerability exists in Aegon Life v1.0, which originates from a SQL injection vulnerability in the clientid parameter in clientStatus.php...

Aegon Life Security Breach

Aegon Life is an application from Aegon Life, Inc. A security vulnerability exists in Aegon Life v1.0 that originates from allowing an attacker to execute arbitrary code by uploading a crafted image file...

PT-2024-27697 · Trendnet · Trendnet Tew-814Dap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-814DAP version 1 FW1.01B01 Description: The issue allows attackers to log in as root due to a hardcoded password vulnerability found in /etc/shadow.sample. This enables unauthorized access to the system. Recommendations: For...

Online Bookstore SQL Injection Vulnerability

Online Book Store is an online bookstore by Arvin Arandilla, a personal developer. A SQL injection vulnerability exists in Online Bookstore version 1.0, which is caused by book.php containing an unknown function that causes SQL injection via the parameter bookisbn...

PT-2024-27698 · Trendnet · Trendnet Tew-814Dap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-814DAP version v1 FW1.01B01 Description: A stack overflow issue was discovered via the submit-url parameter at the "/formSysLog" API endpoint. Recommendations: For TRENDnet TEW-814DAP version v1 FW1.01B01, as a temporary...

Employee and Visitor Gate Pass Logging System Cross-Site Scripting Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0, which originates from an unknown function in...

Employee and Visitor Gate Pass Logging System SQL Injection Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. An SQL injection vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0 due to an unknown part of the deleteusers function in /classes/Users.php, whi...

PT-2024-37229 · Unknown · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical issue was found in the manage product.php file, where the manipulation of the id argument leads to SQL injection. The attack can be initiated remotely. Recommendations: Fo...

Payroll Management System SQL Injection Vulnerability

Payroll Management System is a payroll management system developed by Carlo Montero. A SQL injection vulnerability exists in Payroll Management System version 1.0, which stems from the inclusion of some unknown functions in printpayroll.php that cause SQL injection via the parameter id...

Online Eyewear Shop SQL Injection Vulnerability

Online Eyewear Shop is an online eyewear store by the personal developer Carlo Montero. A SQL injection vulnerability exists in Online Eyewear Shop version 1.0, which originates from unknown code in manageproduct.php that causes SQL injection via the parameter id...

Employee and Visitor Gate Pass Logging System SQL Injection Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. An SQL injection vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0, which is caused by an unknown part of the saveusers function in...

PT-2024-4393 · Ruijie · Ruijie Rg-Uac

Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC version 1.0 Description: A critical issue exists due to the lack of neutralization of special elements used in an operating system command. This allows a remote attacker to execute arbitrary commands through the servicename...

libIEC61850 Security Vulnerabilities

libIEC61850 is an open source library for the IEC 61850 protocol open source by MZ Automation. A security vulnerability exists in libIEC61850 version v1.5, which originates from a heap overflow contained in the BerEncoderencodeLength function in /asn1/berencoder.c. The vulnerability is caused by...

Vehicle Management System SQL Injection Vulnerability

Vehicle Management System is a vehicle management system by Warren Daloyan, an individual developer. A SQL injection vulnerability exists in Vehicle Management System version 1.0, which stems from the fact that updatebill.php contains an unknown function that allows an attacker to perform SQL...

CVE-2024-37163 SkyScrape Secure API Requests

SkyScrape is a GUI Dashboard for AWS Infrastructure and Managing Resources and Usage Costs. SkyScrape's API requests are currently unsecured HTTP requests, leading to potential vulnerabilities for the user's temporary credentials and data. This affects version 1.0.0...

CVE-2024-5342

The Simple Image Popup Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sipspopup' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-36670

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=del...

PT-2024-35734 · WordPress · Simple Image Popup Shortcode

Name of the Vulnerable Software and Affected Versions: The Simple Image Popup Shortcode plugin for WordPress versions up to, and including, 1.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'sips popup' shortcode due to insufficient input sanitization and outpu...

WordPress Contact Form Manager plugin <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by ruphail in WordPress Plugin Contact Form Manager versions = 1.6...

Online Discussion Forum SQL注入漏洞

Online Discussion Forum is a forum website. Itsourcecode Online Discussion Forum version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter useremail in the file login.php that can lead to SQL injection...