CVE-2023-42284

Avertissement Uniquement à des fins éducatives ! Détails Preuve de concept pour CVE-2023-42284. Tyk Gateway est vulnérable à l’injection SQL. Corrigé dans la version 5.0.7. Le paramètre d’URL ‘apiversion’ de l’URL "https:///api/errors/count/...?res=day&p=...&apiversion=&apiid=..."est vulnérable à...

CVE-2023-42284: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

ZRECore 1.3.1 Database Configuration Disclosure

Exploit Title : ZRECore 1.3.1 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : zend.com Software Download Link : github.com/zrecore/ZRECore/archive/master.zip Software Information Link :...

openSUSE Security Update : miniupnpc (openSUSE-SU-2014:0815-1)

miniupnpc was updated to 1.9 to fix a potential buffer overrun in miniwget.c CVE-2014-3985. Besides that the following issues were fixed : - added argument remoteHost to UPNPGetSpecificPortMappingEntry - increment APIVERSION to 10 - --help and -h arguments in upnpc.c - define MAXHOSTNAMELEN if no...