Malicious code in gociay-uga-agid (npm)

Source: amazon-inspector 4f7a1a89805db8b885fa4a8438e82a38ea3874991dd76334ad285c013f244a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

CVE-2021-46444: Improper Neutralization of Special Elements used in an SQL Command

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admingroupedit&agID...

PT-2022-12711

Name of the Vulnerable Software and Affected Versions H.H.G Multistore versions 5.1.0 and below Description The issue is related to a SQL injection vulnerability. It can be exploited via the /admin/admin.php?module=admin group edit&agID API endpoint. Recommendations For versions 5.1.0 and below,...

CVE-2021-38393

A Blind SQL injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properly validate the user-controlled value supplied through the parameter agid before using it as part of an SQL query....

CVE-2021-38393

A Blind SQL injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properly validate the user-controlled value supplied through the parameter agid before using it as part of an SQL query....

PT-2021-22107

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions 1.7.5 and prior Description A Blind SQL injection issue exists in the "/DataHandler/HandlerAlarmGroup.ashx" endpoint. The application does not properly validate the user-controlled value supplied through t...

Delta Electronics DIAEnergie SQL injection vulnerability

A SQL blind injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint in DIAEnergie 1.7.5 and earlier versions. The vulnerability stems from the application not properly validating the value provided by the user via the parameter agid before using the value as part of a S...