6718 matches found
CVE-2022-30510
School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/dailycollectionreport.php:59...
CVE-2022-30510
School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/dailycollectionreport.php:59...
Sql injection
School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/dailycollectionreport.php:59...
The Race to Hide Your Voice
Voice recognition—and data collection—have boomed in recent years. Researchers are figuring out how to protect your privacy...
School Dormitory Management System SQL Injection Vulnerability (CNVD-2022-66677)
School Dormitory Management System is a school dormitory management system. SQL injection vulnerability exists in School Dormitory Management System, which stems from a vulnerability to SQL injection in report/dailycollectionreport.php:59 attack. An attacker could use this vulnerability to execut...
Information Disclosure Vulnerability in UTS Unified Threat Probe of Green Alliance Technology Group Co.
UTS Unified Threat Probe is to realize the collection and parsing work of traffic data, decoding, uploading and original traffic pcap data retention layer by layer, and support intrusion detection, virus detection and star sucking engine, etc., to provide unified threat detection capability. Gree...
School Dormitory Management System SQL注入漏洞
School Dormitory Management System is a school dormitory management system. SQL injection vulnerability exists in School Dormitory Management System, which stems from a vulnerability to SQL injection in report/dailycollectionreport.php:59 attack. An attacker could use this vulnerability to execut...
PT-2022-20147
Name of the Vulnerable Software and Affected Versions School Dormitory Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "reports/daily collection report.php" endpoint. Specifically, the vulnerability is located at line 59 of this file...
Exploit for SQL Injection in School_Dormitory_Management_System_Project School_Dormitory_Management_System
CVE-2022-30510 School Dormitory Management System 1.0 - Unauth...
Magento is affected by an os command injection via the Data collection endpoint
Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an Improper Neutralization of Special Elements Used In A Command via the Data collection endpoint. An attacker with admin privileges can upload a specially crafted file to achieve remote code...
Command Injection
Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Command Injection via the Data collection endpoint. An attacker can execute arbitrary commands on the underlying system by uploading a specially crafted file. Remediation...
GHSA-QMQ6-JPVG-J547 Magento is affected by an os command injection via the Data collection endpoint
Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an Improper Neutralization of Special Elements Used In A Command via the Data collection endpoint. An attacker with admin privileges can upload a specially crafted file to achieve remote code...
Elastic APM agent for Python client CGI proxy redirection flaw
When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attacker redirecting collected APM data to a proxy of their choosing...
School Dormitory Management System SQL Injection Vulnerability (CNVD-2022-66687)
School Dormitory Management System is a school dormitory management system. SQL injection vulnerability exists in School Dormitory Management System v1.0, which originates from /dms/admin/reports/dailycollection The report.php parameter lacks validation for external input SQL statements. An...
H 授权问题漏洞
H is a powerful asset collection and management platform. It is mainly used for src information collection and red and blue confrontation asset collection use. A security vulnerability exists in H v1.0, which can be exploited by an attacker to bypass authentication by performing a session replay...
PT-2022-37724
Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an Improper Neutralization of Special Elements Used In A Command via the Data collection endpoint. An attacker with admin privileges can upload a specially crafted file to achieve remote code...
Hunting down your data with Whitney Merrill: Lock and Code S03E11
Depending on where you live, you can ask a company to hand over all the data it has collected about you and, in a matter of weeks as mandated by law, that company has to fork that information over. Whether the company will abide on time, however, is a different story. In the European Union, the...
CVE-2022-30886
School Dormitory Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /dms/admin/reports/dailycollectionreport.php...