EUVD-2024-49239

Malicious code in bioql PyPI...

CVE-2024-48249

Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-8521

A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index of the file /qso of the component Live QSO. The manipulation of the argument manual leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48257

Wavelog 1.8.5 allows Oqrsmodel.php getworkedmodes stationid SQL injectioin...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48249

Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48257

Wavelog 1.8.5 allows Oqrsmodel.php getworkedmodes stationid SQL injectioin...

CVE-2024-48249

Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

PT-2024-33055 · Wavelog · Wavelog

Name of the Vulnerable Software and Affected Versions: Wavelog version 1.8.5 Description: The issue allows SQL injection via the band, sat, propagation, or mode variables in the get band confirmed function of Gridmap model.php. This can potentially lead to unauthorized access or manipulation of...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

Wavelog 安全漏洞

Wavelog is a web-based amateur radio logging software from Wavelog Open Source. A security vulnerability exists in Wavelog version 1.8.5, which stems from a Gridmapmodel.php getbandconfirmed SQL injection that allows Gridmapmodel.php getbandconfirmed via band, sat, propagation, or mode...

CVE-2024-48251

CVE-2024-48251 affects Wavelog 1.8.5 and is due to an SQL injection in Activated_gridmap_model.php get_band_confirmed, exploitable via the band, sat, propagation, or mode parameters. Public docs report high impact to confidentiality, integrity, and availability (per CVSS metrics: CVSS:3.1/AV:N/AC...

CVE-2024-48249

Wavelog 1.8.5 allows Gridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

PT-2024-33057 · Wavelog · Wavelog

Name of the Vulnerable Software and Affected Versions: Wavelog version 1.8.5 Description: The issue is an SQL injection vulnerability in the Activated gridmap model.php file. This vulnerability can be exploited through the band, sat, propagation, or mode variables. Recommendations: For Wavelog...

Wavelog 安全漏洞

Wavelog is a web-based amateur radio logging software from Wavelog Open Source. A security vulnerability exists in Wavelog version 1.8.5, which stems from allowing Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

Wavelog 安全漏洞

Wavelog is a web-based amateur radio logging software from Wavelog Open Source. A security vulnerability exists in Wavelog version 1.8.5, which stems from an SQL injection vulnerability contained in the stationid parameter in the getworkedmodes function on the Oqrsmodel.php page...

CVE-2024-48257

Wavelog 1.8.5 allows Oqrsmodel.php getworkedmodes stationid SQL injectioin...

CVE-2024-48257

Summary : CVE-2024-48257 affects Wavelog 1.8.5. The vulnerability is an SQL injection in the Oqrs_model.php get_worked_modes function, exploitable via the station_id parameter. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE records) with high severity per CVSS metrics, in...