88 matches found
CVE-2026-40830 Authenticated SQLi in UpdateParam function
A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the admin.mbnetj.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical...
Open5GS 安全漏洞
Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for LTE/NR networks. Versions of Open5GS 2.7.7 and earlier contain security vulnerabilities. These vulnerabilities stem from the amfnamfcallbackhandlesdmdatachangenotify function in the AMF...
Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...
GHSA-WQM3-W3P6-XJGM Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection via the quote function that fails to properly escape special characters. An attacker can execute arbitrary SQL commands by supplying specially crafted input values for database name or table names. Remediation Upgrade...
PT-2025-41380
Name of the Vulnerable Software and Affected Versions Apache Flink CDC version 3.4.0 Description The software is susceptible to a SQL injection due to maliciously crafted identifiers, such as a crafted database name or table name. The attack can only be triggered by a logged-in database user...
EUVD-2005-3437
Malware in sbrugna...
EUVD-2008-1815
Malware in sbrugna...
EUVD-2006-5321
Malware in sbrugna...
EUVD-2007-0271
Malware in sbrugna...
EUVD-2007-2110
Malware in sbrugna...
EUVD-2006-5320
Malware in sbrugna...
EUVD-2006-0264
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2023-37418
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead...
CVE-2025-25618
Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers...
CVE-2024-6422
An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...
CVE-2024-6422
An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...
PT-2024-37615 · Pepperl+Fuchs · Oit1500-F113-B12-Cb +7
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data. Recommendations: At the moment,...
AliveCor KardiaMobile 授权问题漏洞
AliveCor KardiaMobile is a personal electrocardiograph from AliveCor USA. AliveCor KardiaMobile suffers from a security vulnerability that stems from susceptibility to an intent to manipulate vulnerability that allows an attacker to bypass application authentication and view or change information...
MediaWiki 代码问题漏洞
MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki. An attacker can exploit this vulnerability to bypas...