455 matches found
Patient Record Management System xray_print.php File SQL Injection Vulnerability
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the parameter itrno of the xrayprint.php file. The vulnerability ca...
CVE-2025-3208
A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /xrayprint.php. The manipulation of the argument itrno leads to sql injection. It is possible to launch the attack remotely. The exploit...
CVE-2022-41958
super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...
MT Safeline X-Ray X3310 安全漏洞
MT Safeline X-Ray X3310 is an application from MT Safeline, Inc. A security vulnerability exists in MT Safeline X-Ray X3310 version 19.05. A remote attacker can exploit the vulnerability to execute JavaScript code and obtain sensitive information from the victim's browser...
CVE-2023-41595
An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...
CVE-2023-41595
An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...
CVE-2023-41595
An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...
Default credentials
An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...
CVE-2023-41595: Use of Hard-coded Credentials
An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...
CVE-2023-41595
An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...
CVE-2023-41595
The CVE refers to xui-xray v1.8.3 where a default password enables an attacker to obtain sensitive information. Affected software/component: xui-xray 1.8.3. Root cause: use of a default credential, allowing unauthorized access to sensitive data. Impact: information disclosure with high severity (...
PT-2023-27990 · Xui-Xray · Xui-Xray
Name of the Vulnerable Software and Affected Versions: xui-xray version 1.8.3 Description: An issue in the software allows attackers to obtain sensitive information via a default password. Recommendations: For xui-xray version 1.8.3, change the default password to a unique and secure password to...
Xray Audit - Moderately critical - Cross site scripting - SA-CONTRIB-2023-012
This module is a tool for developers, analysts, and administrators that allows them to generate reports on a given Drupal installation. The module does not sufficiently sanitize some data presented in its reports. This vulnerability is mitigated by the fact that an attacker must have a role with...
SUSE CVE-2017-7820
The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects...
Super Xray Code Issue Vulnerability
Super Xray is an excellent vulnerability scanning tool by 4ra1n individual developers. A code issue exists in versions of Super Xray prior to 0.7, which stems from a program configuration that confirms that trusted inputs will be stored in a yaml file, which can be exploited by an attacker with...
CVE-2022-41958
super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...
PT-2022-26183 · Unknown · Super-Xray
Name of the Vulnerable Software and Affected Versions: super-xray versions prior to 0.7 Description: The issue concerns a web vulnerability scanning tool that assumed trusted input for the program config stored in a yaml file. An attacker with local access to the file could exploit this and...
CVE-2022-41958 Deserialization Vulnerability by yaml config input in super-xray
super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...
Super Xray 代码问题漏洞
Super Xray is an excellent vulnerability scanning tool by 4ra1n individual developers. A code issue exists in versions of Super Xray prior to 0.7, which stems from a program configuration that confirms that trusted inputs will be stored in a yaml file, which can be exploited by an attacker with...
CVE-2022-41958: Deserialization of Untrusted Data
super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...