CVE-2023-34647

PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2023-34651

PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2023-32222

D-Link DSL-G256DG version vBZ1.00.27 web management interface allows authentication bypass via an unspecified method...

Lost and Found Information System SQL注入漏洞

Lost and Found Information System is a lost and found information system by oretnom23 individual developer. A security vulnerability exists in Lost and Found Information System v1.0, which stems from an SQL injection vulnerability...

PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A security vulnerability exists in PHPGurukul Hospital Management System version 1.0, which stems from a stored cross-site scripting XSS vulnerability...

CVE-2023-33580

Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting XSS in the "Admin Name" field on Admin Profile page...

Lenovo ThinkSystem 安全漏洞

Lenovo ThinkSystem is a ThinkSystem series server device from Lenovo, a Chinese company. A security vulnerability exists in Lenovo ThinkSystem. An attacker exploited the vulnerability to execute commands without sufficient privileges on SMM v1, SMM v2, and FPC using specially designed Web...

PT-2023-22482 · Fpc +1 · Fpc +1

Name of the Vulnerable Software and Affected Versions: SMM versions 1 and 2 FPC affected versions not specified Description: A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of commands that the...

Malicious code in graphite_remote_adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd2aa60f9c1fac3dfab372dff47188b2dc4b3f4d2b874b811d20db7a47faca1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Online School Fees System 跨站脚本漏洞

Online School Fees System is an online school fees system by Lewa Personal Developer. A cross-site scripting vulnerability exists in Online School Fees System version 1.0, which stems from a problem in the file /paysystem/datatable.php, where incorrect manipulation of the parameter doj can lead t...

PT-2023-17190 · Unknown · Yoga Class Registration System

Name of the Vulnerable Software and Affected Versions: Yoga Class Registration System version 1.0 Description: The issue allows an administrator to execute commands on the server due to the application's failure to correctly validate the thumbnails of the classes uploaded by the administrators...

CVE-2023-34553

An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack...

CVE-2023-34796

Cross site scripting XSS vulnerabiliy in dmarcts-report-viewer dashboard versions 1.1 and thru commit 8a1d882b4c481a05e296e9b38a7961e912146a0f, allows unauthenticated attackers to execute arbitrary code via the orgname or domain values...

TP-LINK TL-WR940N 缓冲区错误漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WR940N that stems from a buffer out-of-bounds read issue in the component VirtualServerRPM, which can be exploited by an attacker to cause a denial of service DoS by constructing a...

CVE-2023-33584

Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection SQLI attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process...

CVE-2023-35095

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Flothemes Flo Forms – Easy Drag & Drop Form Builder plugin = 1.0.40 versions...

SourceCodester Resort Management System 跨站脚本漏洞

Sourcecodester Online Resort Management System is an open source web-based application that provides online room reservations and can also be used as a simple website for resorts. A cross-site scripting vulnerability exists in the SourceCodester Resort Management System version 1.0, which stems...

miniCal SQL注入漏洞

miniCal is miniCal open source an open source PMS. miniCal version 1.0.0 SQL injection vulnerability , the vulnerability stems from the file /booking/showbookings/ parameter searchquery lack of validation of external input SQL statements , an attacker can use this vulnerability to execute illegal...

PT-2023-24978 · Unknown · Phpgurukul Cyber Cafe Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Cyber Cafe Management System version 1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the admin username parameter, which can lead to cross-site scripting XSS attacks. Recommendations: F...

Rail Pass Management System SQL注入漏洞

Rail Pass Management System is a pass management system. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Rail Pass Management System, which stems from an incorrect manipulation of the parameter searchdata resulting in sql injection...