CVE-2023-25160: Authorization Bypass Through User-Controlled Key

Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can access the mail box by ID getting the subjects and the first characters of the emails. Users should upgrade to Mail 2.2.1 for Nextcloud 25, Mail 1.14.5 for...

Forget Heart Message Box SQL Injection Vulnerability (CNVD-2023-08089)

Forget Heart Message Box is a message site. v1.1 of Forget Heart Message Box contains a security vulnerability that originates from a SQL injection vulnerability found through the name parameter in /admin/loginpost.php. No detailed vulnerability details are available at this time...

Forget Heart Message Box SQL Injection Vulnerability

Forget Heart Message Box is a messaging website. v1.1 of Forget Heart Message Box is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the name parameter of ca.php. An attacker could use this vulnerability to execute illegal SQL commands to ste...

Malicious Package

Overview make-box is a malicious package. It distributes Discord malware hosted on pastebin, that can steal important host information and credentials. Remediation Avoid using all malicious instances of the make-box package. Credit: Snyk Research Team...

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.

...

Amazon Still Selling T95 TV Box with Pre-Installed Malware

By Deeba Ahmed Malwarebytes has confirmed that, despite confirmed reports of the presence of pre-installed malware in T95 TV boxes, Amazon is still allowing their sale. This is a post from HackRead.com Read the original post: Amazon Still Selling T95 TV Box with Pre-Installed Malware...

CVE-2023-24241

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php...

CVE-2023-24956

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php...

Sql injection

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php...

CVE-2023-24956

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php...

CVE-2023-24241

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php...

CVE-2023-24241: Improper Neutralization of Special Elements used in an SQL Command

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php...

CVE-2023-24956

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php...

CVE-2023-24241

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php...

CVE-2023-24956: Improper Neutralization of Special Elements used in an SQL Command

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php...

CVE-2023-24241

ForForget Heart Message Box v1.1, a SQL injection vulnerability exists in the admin/loginpost.php endpoint, exploitable via the name parameter. The CVE entry and multiple connected sources consistently describe this issue without detailing a fix. The associated CVSS v3.1 data indicate a critical ...

PT-2023-19838 · Unknown · Forget Heart Message Box

Name of the Vulnerable Software and Affected Versions: Forget Heart Message Box version 1.1 Description: A SQL injection issue was discovered in Forget Heart Message Box via the name parameter at the "/cha.php" API endpoint. Recommendations: For Forget Heart Message Box version 1.1, consider...

CVE-2023-24241

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php...

CVE-2023-24956

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php...

CVE-2023-24956

Forget Heart Message Box v1.1 has a SQL injection vulnerability in the name parameter of the /cha.php endpoint. The issue is publicly described across multiple sources (CNVD, CNNVD, NVD, Red Hat, OSV, etc.) with CVSS v3.1 base score 8.8 (HIGH) and impact to confidentiality, integrity, and availab...