Online Computer and Laptop Store Arbitrary File Upload Vulnerability (CNVD-2023-40599)

Online Computer and Laptop Store is an online computer and laptop store. An arbitrary file upload vulnerability exists in Online Computer and Laptop Store v1.0, which stems from a failure to restrict file uploads at /classes/Users.php?f=save, and can be exploited by an attacker to cause remote co...

USN-6085-1 linux-raspi vulnerabilities

It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. CVE-2022-27672 Zheng Wang discovered that the Intel i915 graphics...

orioncomputerworld.nl Cross Site Scripting vulnerability OBB-3347025

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-31857

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

Remote code execution

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

CVE-2023-31857

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

CVE-2023-31857

CVE-2023-31857 affects Sourcecodester Online Computer and Laptop Store 1.0. The vulnerability is an unrestricted file upload via the endpoint /classes/Users.php?f=save, enabling remote code execution. References and metadata consistently describe this path and the high impact (CVSS 3.1: 9.8, NET/...

Malicious code in yaml2binary (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e557012b685f3c77bcab7d7fd0961cf479e7010b4ce9af898f807cf429b1b242 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-451 Malicious code in flying_pusher (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9091b084b192777c6cbacc1b67d67b879e2cdceda2b68082e975394f648cac68 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-167 Malicious code in cfa-styleguide (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5562a6cb1d5f239216be52c28e8d316e8ffe0f490d11978863202a6fcfcbe8bc Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-46 Malicious code in @nokia-csf-uxr/csfwidgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39bbff0400a8d8025c9c214e1a4412729bd69e23c231e3307d61d05b54f8eb72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1046 Malicious code in json2stringfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2e42c4a993125bac35486d178cd7356e08471fc96b79862efed3c64ae4f1d7d6 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

CVE-2023-2661

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

CVE-2023-2661 SourceCodester Online Computer and Laptop Store Master.php sql injection

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

CVE-2023-2661

SourceCodester Online Computer and Laptop Store 1.0 is affected by CVE-2023-2661. The vulnerability resides in /classes/Master.php where manipulating the id parameter leads to an SQL injection. Exploitation can be remote, and public disclosures exist. Multiple sources (NVD CVSSv3.1 base 9.8; othe...

CVE-2023-2660

CVE-2023-2660 affects SourceCodester Online Computer and Laptop Store 1.0. A SQL injection vulnerability exists in the view_categories.php file via the c parameter, allowing remote attackers to manipulate the database. The issue’s impact is described as high confidentiality, integrity, and availa...

CVE-2023-2659

CVE-2023-2659 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability exists in the view_product.php file, where manipulating the id parameter leads to SQL injection. It is exploitable remotely, and the public exploit is known. Multiple connected sources confirm the issue a...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely...

CVE-2023-2658 SourceCodester Online Computer and Laptop Store products.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely...

CVE-2023-2657

The CVE-2023-2657 entry concerns SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is a cross-site scripting flaw in the file products.php triggered by manipulating the search argument, allowing remote exploitation. Affected functionality is unknown but centered on the produc...