561 matches found
Exploit for CVE-2023-2986
Original Proof of Concept for CVE-2023-2986 Proof of Concept...
gpt_academic 信息泄露漏洞
gptacademic is a graphical interactive interface for ChatGPT/GLM, specially optimized for the paper reading and touching up experience. A security vulnerability exists in gptacademic 3.37 and earlier versions. The vulnerability stems from not configuring sensitive files to be off-limits, which ca...
PT-2023-21588 · Sourcecodester · Sourcecodester Class Scheduling System
Name of the Vulnerable Software and Affected Versions: SourceCodester Class Scheduling System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Class Scheduling System. The issue affects an unknown function of the file /admin/save teacher.php, specifically...
SourceCodester Class Scheduling System 跨站脚本漏洞
Class Scheduling System is a class scheduling system. A cross-site scripting vulnerability exists in Class Scheduling System v1.0, which originates from the lack of effective filtering and escaping of user-supplied data in the AcademicRank parameter of the file /admin/saveteacher.php in the...
CVE-2023-2367
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/manageacademic.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...
Sql injection
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/manageacademic.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...
PT-2023-19113 · Sourcecodester · Sourcecodester Faculty Evaluation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/manage academic.php. The manipulation of the id argument leads to sql injection,...
Faculty Evaluation System SQL注入漏洞
Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of /admin/manageacademic.php...
Exploit for Improper Access Control in Papercut Papercut_Mf
CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG...
Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign
The North Korean threat actor known as the Lazarus Group has been observed shifting its focus and rapidly evolving its tools and tactics as part of a long-running campaign called DeathNote. While the nation-state adversary is known for persistently singling out the cryptocurrency sector, recent...
Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign
The North Korean threat actor known as the Lazarus Group has been observed shifting its focus and rapidly evolving its tools and tactics as part of a long-running campaign called DeathNote. While the nation-state adversary is known for persistently singling out the cryptocurrency sector, recent...
Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication
CVE-2023-27532 POC for CVE-2023-27532 affecting Veeam Backup a...
S4x23 Review Part 1: What's New in OT Security
This blog introduces discussions from S4x23, the ICS security conference in Miami over several posts. The first installment will cover two topics from the academic interviews...
Unauthorized Access Vulnerability in Teaching Management System of Hunan Qiangzhi Technology Development Co.
Hunan Qiangzhi Technology Development Co., Ltd. is an education informatization service provider. An unauthorized access vulnerability exists in the Academic Affairs Management System of Hunan Qiangzhi Technology Development Company Limited, which can be exploited by attackers to obtain sensitive...
CVE-2023-21831
Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft component: Advising Notes. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpris...
CVE-2023-21831
Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft component: Advising Notes. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpris...
Code injection
Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft component: Advising Notes. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpris...
Oracle PeopleSoft Enterprise PeopleTools 安全漏洞
Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for providing PeopleSoft applications with the ability to stay in sync with users' needs and expectations. A security vulnerability exists in PeopleSoft Enterprise CS Academic Advisement 9.2, which can be exploited by an attacker to...
CVE-2023-21831
Summary: CVE-2023-21831 affects Oracle PeopleSoft Enterprise CS Academic Advisement (component: Advising Notes) with affected version 9.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read a subset of data, per CVSS 3.1 base score 5.3 (Confidentiality imp...