Food Delivery Script SQL注入漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.0, which is caused by a SQL injection vulnerability in the "column" parameter of the index.php file...

Restaurant Booking Script 安全漏洞

Restaurant Booking Script is a restaurant reservation system. A security vulnerability exists in PHPJabbers Restaurant Booking Script version v3.0, which stems from a user enumeration vulnerability during password reset...

PT-2023-27631 · Phpjabbers · Phpjabbers Ticket Support Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: The issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid...

Ticket Support Script 安全漏洞

Ticket Support Script is an affordable online help desk system. A security vulnerability exists in Ticket Support Script version v3.2, which originates from a user enumeration vulnerability during password reset...

CVE-2023-24394

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy iframe popup plugin = 3.3 versions...

CVE-2023-32591

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Cloud Primero B.V DBargain plugin = 3.0.0 versions...

WordPress plugin DBargain 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

OWASP Coraza WAF 资源管理错误漏洞

OWASP Coraza WAF is a golang modsecurity-compatible web application firewall library in the Coraza open source. A resource management error vulnerability exists in OWASP Coraza WAF version 3.0.0, which stems from misuse of log.Fatalf and causes applications using coraza to crash after receiving a...

PT-2023-23896 · Cloud Primero B.V · Dbargain Plugin

Name of the Vulnerable Software and Affected Versions: Cloud Primero B.V DBargain plugin versions = 3.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Cloud Primero B.V DBargain plugi...

WordPress plugin iframe 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Libreswan 代码问题漏洞

Libreswan is an IPsec implementation similar to Openswan, which is primarily used to ensure security and integrity issues in data transmission. A security vulnerability exists in Libreswan version 3.x, version 4.x up to and including version 4.12, which originates when an IKEv1 ISAKMP SA message...

CVE-2022-25024

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

CVE-2021-30047

VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed...

vsftpd 安全漏洞

vsftpd is an FTP File Transfer Protocol server for Unix-like systems. A security vulnerability exists in vsftpd version 3.0.3, which originated from allowing an attacker to cause a denial of service due to a limited number of allowed connections...

PT-2023-12137

Name of the Vulnerable Software and Affected Versions VSFTPD version 3.0.3 Description The issue allows attackers to cause a denial of service due to a limited number of connections allowed. Recommendations For VSFTPD version 3.0.3, at the moment, there is no information about a newer version tha...

CVE-2023-39808

N.V.K.INTER CO., LTD. NVK iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to login with root privileges via the SSH service. The cleartext password corresponding to the $1$4Tmm01jl$7HRvcW.bz7uGmX9hiQWvR hash was not determined by the vulnerability discoverer...

N.V.K.INTER iBSG SQL注入漏洞

N.V.K.INTER iBSG NVK iBSG is a security appliance from N.V.K.INTER. A security vulnerability exists in N.V.K.INTER iBSG version v3.5, which originates from a SQL injection vulnerability in the parameter apasswd in the file /portal/user-register.php...

PT-2023-27115 · N.V.K.Inter Co. · Ibsg

Name of the Vulnerable Software and Affected Versions: N.V.K.INTER CO., LTD. NVK iBSG version 3.5 Description: The issue is related to a hardcoded root password in the software, which allows attackers to login with root privileges via the SSH service. Recommendations: For version 3.5, consider...

N.V.K.INTER iBSG 信任管理问题漏洞

N.V.K.INTER iBSG NVK iBSG is a security appliance from N.V.K.INTER, Inc. A security vulnerability exists in N.V.K.INTER iBSG version v3.5, which stems from the presence of a hard-coded root password that allows an attacker to log in with root privileges via SSH service...

CVE-2023-32491

Dell PowerScale OneFS 9.5.0.x, contains an insertion of sensitive information into log file vulnerability in SNMPv3. A low privileges user could potentially exploit this vulnerability, leading to information disclosure...