6118 matches found
CVE-2024-36599
A cross-site scripting XSS vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at insertClient.php...
CVE-2024-36597
Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the clientid parameter at clientStatus.php...
CVE-2024-5985
A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Aegon Life Security Breach
Aegon Life is an application from Aegon Life, Inc. A security vulnerability exists in Aegon Life v1.0 that originates from allowing an attacker to execute arbitrary code by uploading a crafted image file...
Aegon Life SQL Injection Vulnerability
Aegon Life is an application from Aegon Life. A SQL injection vulnerability exists in Aegon Life v1.0, which originates from a SQL injection vulnerability in the clientid parameter in clientStatus.php...
PT-2024-27697 · Trendnet · Trendnet Tew-814Dap
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-814DAP version 1 FW1.01B01 Description: The issue allows attackers to log in as root due to a hardcoded password vulnerability found in /etc/shadow.sample. This enables unauthorized access to the system. Recommendations: For...
PT-2024-27698 · Trendnet · Trendnet Tew-814Dap
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-814DAP version v1 FW1.01B01 Description: A stack overflow issue was discovered via the submit-url parameter at the "/formSysLog" API endpoint. Recommendations: For TRENDnet TEW-814DAP version v1 FW1.01B01, as a temporary...
Online Bookstore SQL Injection Vulnerability
Online Book Store is an online bookstore by Arvin Arandilla, a personal developer. A SQL injection vulnerability exists in Online Bookstore version 1.0, which is caused by book.php containing an unknown function that causes SQL injection via the parameter bookisbn...
PT-2024-37229 · Unknown · Sourcecodester Online Eyewear Shop
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical issue was found in the manage product.php file, where the manipulation of the id argument leads to SQL injection. The attack can be initiated remotely. Recommendations: Fo...
Employee and Visitor Gate Pass Logging System Cross-Site Scripting Vulnerability
Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0, which originates from an unknown function in...
Employee and Visitor Gate Pass Logging System SQL Injection Vulnerability
Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. An SQL injection vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0 due to an unknown part of the deleteusers function in /classes/Users.php, whi...
Online Eyewear Shop SQL Injection Vulnerability
Online Eyewear Shop is an online eyewear store by the personal developer Carlo Montero. A SQL injection vulnerability exists in Online Eyewear Shop version 1.0, which originates from unknown code in manageproduct.php that causes SQL injection via the parameter id...
Payroll Management System SQL Injection Vulnerability
Payroll Management System is a payroll management system developed by Carlo Montero. A SQL injection vulnerability exists in Payroll Management System version 1.0, which stems from the inclusion of some unknown functions in printpayroll.php that cause SQL injection via the parameter id...
Employee and Visitor Gate Pass Logging System SQL Injection Vulnerability
Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. An SQL injection vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0, which is caused by an unknown part of the saveusers function in...
PT-2024-4393 · Ruijie · Ruijie Rg-Uac
Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC version 1.0 Description: A critical issue exists due to the lack of neutralization of special elements used in an operating system command. This allows a remote attacker to execute arbitrary commands through the servicename...
libIEC61850 Security Vulnerabilities
libIEC61850 is an open source library for the IEC 61850 protocol open source by MZ Automation. A security vulnerability exists in libIEC61850 version v1.5, which originates from a heap overflow contained in the BerEncoderencodeLength function in /asn1/berencoder.c. The vulnerability is caused by...
Vehicle Management System SQL Injection Vulnerability
Vehicle Management System is a vehicle management system by Warren Daloyan, an individual developer. A SQL injection vulnerability exists in Vehicle Management System version 1.0, which stems from the fact that updatebill.php contains an unknown function that allows an attacker to perform SQL...
CVE-2024-37163 SkyScrape Secure API Requests
SkyScrape is a GUI Dashboard for AWS Infrastructure and Managing Resources and Usage Costs. SkyScrape's API requests are currently unsecured HTTP requests, leading to potential vulnerabilities for the user's temporary credentials and data. This affects version 1.0.0...
CVE-2024-5342
The Simple Image Popup Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sipspopup' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...