514 matches found
CVE-2025-25382: External Control of Assumed-Immutable Web Parameter
An issue in the Property Tax Payment Portal in Information Kerala Mission SANCHAYA v3.0.4 allows attackers to arbitrarily modify payment amounts via a crafted request...
CVE-2022-49068
CVE-2022-49068 — Summary (Linux kernel, btrfs) The issue occurs in btrfs direct IO write path: during get_blocks_direct_write(), temporary delalloc extents are reserved and later released with btrfs_delalloc_release_extents(). If the length is modified in the COW path, fewer extents may be releas...
CVE-2022-49068
In the Linux kernel, the following vulnerability has been resolved: btrfs: release correct delalloc amount in direct IO write path Running generic/406 causes the following WARNING in btrfsdestroyinode which tells there are outstanding extents left. In btrfsgetblocksdirectwrite, we reserve a...
CVE-2021-26631
Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order...
itsourcecode Tailoring Management System 注入漏洞
itsourcecode Tailoring Management System is a tailoring management system from itsourcecode open source. An injection vulnerability exists in version 1.0 of itsourcecode Tailoring Management System, which stems from the parameter id/amount/desc/inccat in the file /addpayment.php that can lead to...
PT-2025-4081 · Unknown · Itsourcecode Tailoring Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Tailoring Management System version 1.0 Description: A critical issue has been found in the itsourcecode Tailoring Management System. The problem lies in an unknown function of the file /addpayment.php. Manipulation of the id,...
CVE-2025-0872: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /addpayment.php. The manipulation of the argument id/amount/desc/inccat leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2024-11074: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file /incadd.php. The manipulation of the argument inccat/desc/date/amount leads to sql injection. The attack can be initiated remotely. The exploit has...
PT-2024-41495
Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.1 Description A permissions issue allowed a malicious application with root privileges to access private information. This was addressed with additional restrictions. Recommendations Update to macOS version 15.1 or...
CVE-2024-9333 Permission bypass in M-Files Connector for Copilot
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...
CVE-2024-9089
A vulnerability was found in SourceCodester Modern Loan Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file updateloanrecord.php. The manipulation of the argument amount leads to cross site scripting. The attack may be initiated remotely. Th...
CVE-2024-9089: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Modern Loan Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file updateloanrecord.php. The manipulation of the argument amount leads to cross site scripting. The attack may be initiated remotely. Th...
CVE-2024-9089
CVE-2024-9089 affects SourceCodester Modern Loan Management System 1.0. The vulnerability is a cross-site scripting issue caused by manipulation of the amount parameter in update_loan_record.php. The attack can be initiated remotely, and the exploit has been disclosed publicly. Practical impact i...
SourceCodester Modern Loan Management System 跨站脚本漏洞
SourceCodester Modern Loan Management System is an open source modern loan management system from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Modern Loan Management System version 1.0, which stems from an incorrect manipulation of the parameter amount that can le...
PT-2024-39423 · Sourcecodester · Sourcecodester Loan Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Modern Loan Management System version 1.0 Description: A problematic issue affects the processing of the file update loan record.php, where the manipulation of the amount argument leads to cross-site scripting. The attack can b...
CVE-2023-6841 Keycloak: amount of attributes per object is not limited and it may lead to dos
A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resource exhaustion when the application send back rows with long attribute values...
Simple Invoice Generator System SQL注入漏洞
Simple Invoice Generator System is a simple invoice generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Invoice Generator System version 1.0, which originates in the invoicecode/customer/cashier/totalamount/discountpercentage of the /saveinvoice.ph...
Malicious code in sap-amount (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8956ea6aded6c1b89426a6ac908c07ef50a95ae0dd32d0a8c4d5be953fe93583 The OpenSSF Package Analysis project identified 'sap-amount' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7545 Malicious code in sap-amount (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8956ea6aded6c1b89426a6ac908c07ef50a95ae0dd32d0a8c4d5be953fe93583 The OpenSSF Package Analysis project identified 'sap-amount' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...