CVE-2023-33509

KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...

CVE-2023-33508

CVE-2023-33508 affects KramerAV VIA GO² prior to version 4.0.1.1326, with unauthenticated file upload leading to Remote Code Execution (RCE) . Multiple connected sources corroborate this vulnerability in affected versions. Exploitation details are not provided in the supplied documents. Remediati...

CVE-2023-33507

KramerAV VIA GO² versions before 4.0.1.1326 are vulnerable to an unauthenticated arbitrary file read. The issue affects the product’s handling of file access (no credentials required, network vector). Public references across multiple feeds corroborate that versions prior to 4.0.1.1326 are affect...

CVE-2023-33507

KramerAV VIA GO² 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read...

CVE-2023-33508

KramerAV VIA GO² 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution RCE...

CVE-2023-33509

KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...

PT-2023-24369 · Kramerav · Kramerav Via Go²

Name of the Vulnerable Software and Affected Versions: KramerAV VIA GO² versions prior to 4.0.1.1326 Description: The issue allows for unauthenticated file upload, resulting in Remote Code Execution RCE. Recommendations: For versions prior to 4.0.1.1326, update to version 4.0.1.1326 or later to...

CVE-2023-33509: Improper Neutralization of Special Elements used in an SQL Command

KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...

CVE-2023-33507: Undefined Security Weakness

KramerAV VIA GO² 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read...

Kramer VIA GO² SQL注入漏洞

The Kramer VIA GO² is a 4K wireless presentation device from Kramer. A security vulnerability exists in Kramer VIA GO² versions prior to 4.0.1.1326 that stems from vulnerability to SQL injection attacks...

PT-2023-24368 · Kramerav · Kramerav Via Go²

Name of the Vulnerable Software and Affected Versions: KramerAV VIA GO² versions prior to 4.0.1.1326 Description: The issue allows for unauthenticated arbitrary file read. Recommendations: For versions prior to 4.0.1.1326, update to version 4.0.1.1326 or later to resolve the issue...

CVE-2023-33509

CVE-2023-33509 affects KramerAV VIA GO² before version 4.0.1.1326, with a SQL injection vulnerability reported. The CVSS base metrics indicate CRITICAL impact to confidentiality, integrity, and availability (network attack, no user interaction). Remediation: update to 4.0.1.1326 or later where fi...

The vulnerability in the RLBox Expat browser driver for Firefox and Firefox ESR allows a malicious actor to trigger an unexpected termination of the application.

The vulnerability of the RLBox Expat browser drivers for Firefox and Firefox ESR involves reading data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause an unexpected termination of the application through a specially created website...

CVE-2023-2619

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects the function exec of the file disapprovedelete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

TotalJS messenger 跨站脚本漏洞

TotalJS messenger is a Node.js open source Slack alternative to the Total.js Platform open source. TotalJS Messenger version b6cf1c9 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML via a crafted payload injected into t...

PT-2023-19396 · Sourcecodester · Ac Repair/Services System

Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue was found in the system, affecting the file /admin/services/view service.php. The manipulation of the id argument leads to SQL injection. It is possible to...

mySCADA myPRO 操作系统命令注入漏洞

mySCADA myPRO is a software application. myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO 8.26.0 and earlier versions, which can be exploited by an...

PT-2023-20558

Name of the Vulnerable Software and Affected Versions Hyundai Gen5W L in-vehicle infotainment system version AE E PE EUR.S5W L001.001.211214 Description An issue was discovered in the Hyundai Gen5W L in-vehicle infotainment system. The decryption binary used to decrypt firmware files has an...

CVE-2023-2145

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been classified as critical. Affected is an unknown function of the file projectspercurriculum.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2023-29090

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Via header...