539 matches found
CVE-2023-2367
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/manageacademic.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...
Sql injection
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/manageacademic.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...
PT-2023-19113 · Sourcecodester · Sourcecodester Faculty Evaluation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/manage academic.php. The manipulation of the id argument leads to sql injection,...
Faculty Evaluation System SQL注入漏洞
Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of /admin/manageacademic.php...
Exploit for Improper Access Control in Papercut Papercut_Mf
CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG...
Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign
The North Korean threat actor known as the Lazarus Group has been observed shifting its focus and rapidly evolving its tools and tactics as part of a long-running campaign called DeathNote. While the nation-state adversary is known for persistently singling out the cryptocurrency sector, recent...
Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign
The North Korean threat actor known as the Lazarus Group has been observed shifting its focus and rapidly evolving its tools and tactics as part of a long-running campaign called DeathNote. While the nation-state adversary is known for persistently singling out the cryptocurrency sector, recent...
Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication
CVE-2023-27532 POC for CVE-2023-27532 affecting Veeam Backup a...
S4x23 Review Part 1: What's New in OT Security
This blog introduces discussions from S4x23, the ICS security conference in Miami over several posts. The first installment will cover two topics from the academic interviews...
Unauthorized Access Vulnerability in Teaching Management System of Hunan Qiangzhi Technology Development Co.
Hunan Qiangzhi Technology Development Co., Ltd. is an education informatization service provider. An unauthorized access vulnerability exists in the Academic Affairs Management System of Hunan Qiangzhi Technology Development Company Limited, which can be exploited by attackers to obtain sensitive...
CVE-2023-21831
Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft component: Advising Notes. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpris...
CVE-2023-21831
Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft component: Advising Notes. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpris...
Code injection
Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft component: Advising Notes. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpris...
Oracle PeopleSoft Enterprise PeopleTools 安全漏洞
Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for providing PeopleSoft applications with the ability to stay in sync with users' needs and expectations. A security vulnerability exists in PeopleSoft Enterprise CS Academic Advisement 9.2, which can be exploited by an attacker to...
CVE-2023-21831
Summary: CVE-2023-21831 affects Oracle PeopleSoft Enterprise CS Academic Advisement (component: Advising Notes) with affected version 9.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read a subset of data, per CVSS 3.1 base score 5.3 (Confidentiality imp...
Exploit for Improper Input Validation in Zohocorp Manageengine_Access_Manager_Plus
CVE-2022-47966 POC for CVE-2022-47966 affecting the following...
File Download Vulnerability in Teaching Integrated System of Hunan Strong Intelligence Technology Development Co.
Hunan Strong Intelligence Technology Development Co., Ltd. is a domestic university informatization service provider. A file download vulnerability exists in the Academic Affairs Integration System of Hunan Qiangzhi Technology Development Company Limited, which can be exploited by attackers to...
Exploit for Improper Authentication in Fortinet Fortiproxy
CVE-2022-40684 CVSS score: 9.6 POC for CVE-2022-40684 affect...