Simple Subscription Website SQL注入漏洞

Simple Subscription Website is an open source, web-based simple subscription application by Carlo Montero Personal Developer. It is used to provide companies with possible members to apply for plans that offer certain services. A SQL injection vulnerability exists in Simple Subscription Website...

CVE-2024-32482 Tillitis TKey Signer possible RAM disclosure vulnerability

The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’s data in RAM over the USB interface. To exploit the vulnerability an attacker needs to use a custom client application and to touch the...

PX4 Drone Autopilot 安全漏洞

PX4 Drone Autopilot is a PX4 drone autopilot open-sourced by PX4 Autopilot for Drones. A security vulnerability exists in PX4 Drone Autopilot version v.1.14, which stems from a vulnerability that allows an attacker to exploit a functionality flaw to break through a geofence and fly a drone into a...

PT-2024-28998 · Unknown · Kashipara Online Furniture Shopping Ecommerce Website

Name of the Vulnerable Software and Affected Versions: Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description: A vulnerability was found in the file search.php, where the manipulation of the txtSearch argument leads to cross site scripting. It is possible to launch the atta...

nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin)

A flaw was found in Node.js. The privateDecrypt API of the crypto library may allow a covert timing side-channel during PKCS1 v1.5 padding error handling. This issue revealed significant timing differences in decryption for valid and invalid ciphertexts, which may allow a remote attacker to decry...

CVE-2024-31547

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/viewitem.php...

The vulnerability of the client HTTP/1.1 and the Node.js software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the HTTP/1.1 client and the Node.js software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Cyber Cafe Management System 安全漏洞

Cyber Cafe Management System CCMS is a cyber cafe management system by the individual developer Anuj Kumar. A security vulnerability exists in version 1.0 of the PHPGurukul Cyber Cafe Management System, which originates from a vulnerability that allows an attacker to perform SQL injection attacks...

Peplink Smart Reader 访问控制错误漏洞

Peplink Smart Reader is a smart reader from Peplink Inc. It is used for employee time and attendance. An access control error vulnerability exists in Peplink Smart Reader v1.2.0, which stems from the presence of an information disclosure vulnerability that could lead to the disclosure of sensitiv...

PT-2024-23703 · Unknown · Phpgurukul Cyber Cafe Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Cyber Cafe Management System Using PHP & MySQL version 1.0 Description: The issue allows attackers to run arbitrary SQL commands via the editid variable in the "/edit-computer-detail.php" API endpoint. This enables attackers to...

DEBIAN-CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

DEBIAN-CVE-2022-24808

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users shou...

PT-2024-24187 · Shibang Communications · Shibang Communications Co.

Name of the Vulnerable Software and Affected Versions: Shibang Communications Co., Ltd. IP network intercom broadcasting system version 1.0 Description: The issue allows a local attacker to execute arbitrary code via the my parser.php component. This is a result of a File Upload vulnerability in...

CVE-2024-31649

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

Cosmetics and Beauty Product Online Store 安全漏洞

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products by Carlo Montero, an individual developer. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Search...

Cosmetics and Beauty Product Online Store 安全漏洞

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products from the individual developer Carlo Montero. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Product...

Silex Technology DS-600 安全漏洞

The Silex Technology DS-600 is a hardware device from Silex Technology, Inc. designed to easily connect and share USB 3.0 and 2.0 devices over a network. A security vulnerability exists in the Silex Technology DS-600 version v.1.4.1. A remote attacker could exploit the vulnerability to edit devic...

Cosmetics and Beauty Product Online Store 安全漏洞

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products by Carlo Montero, an individual developer. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Last Name...

SUSE CVE-2024-3652

The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected...

Campcodes House Rental Management System SQL注入漏洞

Campcodes House Rental Management System is a house rental management system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes House Rental Management System, which is caused by an SQL injection in the id parameter of the managetenant.php file...