3481 matches found
Simple Mobile Comparison Website 1.0 Cross Site Scripting
Exploit Title: Simple Mobile Comparison Website v1.0 - Reflected Cross-Site Scripting XSS Unauthenticated Author: Ayedh AlQahtani Discovery Date: 2022-03-18 Vendor Homepage: https://www.sourcecodester.com/ Tested Version: v1.0 Tested on: XAMPP, Windows 11 Pro x64 es Vulnerability Type: Reflected...
Simple Mobile Comparison Website SQL Injection Vulnerability
Simple Mobile Comparison Website is a mobile comparison website by Carlo Montero's personal developer. Simple Mobile Comparison Website is vulnerable to SQL injection and no details of the vulnerability are available...
CVE-2022-26170
Simple Mobile Comparison Website v1.0 was discovered to contain a SQL injection vulnerability via the search parameter...
CVE-2022-26170
Simple Mobile Comparison Website v1.0 was discovered to contain a SQL injection vulnerability via the search parameter...
CVE-2022-26170
Simple Mobile Comparison Website v1.0 was discovered to contain a SQL injection vulnerability via the search parameter...
CVE-2022-26170
Simple Mobile Comparison Website v1.0 was discovered to contain a SQL injection vulnerability via the search parameter...
CVE-2022-26170
Affected software: Simple Mobile Comparison Website v1.0. The vulnerability is a SQL injection in the search parameter, stemming from unsanitized input in the search functionality. Documented impact per CVSS: Confidentiality, Integrity, and Availability all at high/partial levels (C/H, I/H, A/H f...
PT-2022-17704
Name of the Vulnerable Software and Affected Versions Simple Mobile Comparison Website version 1.0 Description A SQL injection issue was found in the search parameter of the website. Recommendations For version 1.0, avoid using the search parameter until the issue is resolved. As a temporary...
CVE-2022-26170: Improper Neutralization of Special Elements used in an SQL Command
Simple Mobile Comparison Website v1.0 was discovered to contain a SQL injection vulnerability via the search parameter...
Simple Mobile Comparison Website SQL注入漏洞
Simple Mobile Comparison Website is a mobile comparison website by Carlo Montero's personal developer. Simple Mobile Comparison Website is vulnerable to SQL injection and no details of the vulnerability are available...
WordPress Best Responsive Comparison Table for Gutenberg Editor – NicheTable plugin <= 2.2.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Best Responsive Comparison Table for Gutenberg Editor – NicheTable plugin versions = 2.2.0. Solution Update the WordPress Best Responsive Comparison Table for Gutenberg Editor – NicheTable plugin to the latest available versio...
WordPress Best Responsive Comparison Table for Gutenberg Editor – NicheTable plugin <= 2.2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Best Responsive Comparison Table for Gutenberg Editor – NicheTable plugin versions = 2.2.0. Solution Update the WordPress Best Responsive Comparison Table for Gutenberg Editor – NicheTable plugin to th...
in helloxz/onenav
Description During the comparisons of different variables, PHP will automatically convert the data into a common, comparable type. This makes it possible to compare the number 12 to the string '12' or check whether or not a string is empty by using a comparison like $string == True. This, however...
GHSA-47WR-426J-FR82 Symbolic links in an unpacking routine may enable attackers to read and/or write to arbitrary locations in dbdeployer
Impact Users unpacking a tarball through dbdeployer may use a maliciously packaged tarball that contains symlinks to files external to the target. In such scenario, an attacker could induce dbdeployer to write into a system file, thus altering the computer defences. Mitigating factors For the...
OESA-2022-1522 numpy security update
A fast multidimensional array facility for Python. Security Fixes: Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArrayDescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort...
Information Disclosure
hive-service is vulnerable to information disclosure. The vulnerability exists because the verifyAndExtract function of CookieSigner.java uses a constant-time comparison for cookie signature verification, allowing an attacker to recover another user's cookie signature...
CVE-2021-41838
An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of a Numeric Range Comparison Without a Minimum Check...
IaC: Azure Resource Manager Templates vs. Terraform
Dive into a hands-on comparison of Azure Resource Manager templates and Terraform. This article highlights the primary features of each solution, comparing and contrasting their capabilities and performance...
PT-2022-11494
Name of the Vulnerable Software and Affected Versions InsydeH2O kernel versions 5.0 through 5.5 Description The issue allows an attacker to access the System Management Mode and execute arbitrary code due to a Numeric Range Comparison Without a Minimum Check in the SdHostDriver. This vulnerabilit...
CVE-2021-41838: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of a Numeric Range Comparison Without a Minimum Check...