1901 matches found
Companymaps 8.0 SQL Injection
Exploit Title: Unauthenticated SQL injection - Google Dork: - Date: 27.04.2023 - Exploit Author: Lucas Noki 0xPrototype - Vendor Homepage: https://github.com/vogtmh - Software Link: https://github.com/vogtmh/cmaps - Version: 8.0 - Tested on: Mac, Windows, Linux - CVE : CVE-2023-29809 Description:...
CVE-2021-25078
creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25078.yaml...
CVE-2021-30497
creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-30497.yaml 2024-01-16 05:35:28+00:00| seen| https://t.me/arpsyndicate/2829 2024-10-31 00:00:00+00:00| exploited| The Shadowserve...
service.saphir-maschinen.de Cross Site Scripting vulnerability OBB-3275748
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-48313
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2022-48314
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2022-48313
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2022-48314
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...
Design/Logic Flaw
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2022-48314
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2022-48314
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2022-48313
Technical details about CVE-2022-48313 are not publicly provided in the supplied documents. Monitor updates from vendors (e.g., HarmonyOS/Red Hat) and NVD for affected products, impact, and fixes.
CVE-2022-48313
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2022-48313
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...
PT-2023-15693 · Unknown · Bluetooth Module
Name of the Vulnerable Software and Affected Versions: Bluetooth module affected versions not specified Description: The issue concerns a problem with the Bluetooth module where it is possible to bypass user confirmation during the pairing process. This could potentially impact confidentiality...
PT-2023-15692 · Unknown · Bluetooth Module
Name of the Vulnerable Software and Affected Versions: Bluetooth module affected versions not specified Description: The issue concerns a problem where the Bluetooth module can bypass user confirmation during the pairing process. This could potentially impact confidentiality. Recommendations: At...
PT-2024-39: Readout protection level bypass before the first power-on cycle in GigaDevice Semiconductor products
The vulnerability of readout protection level bypass before the first power-on cycle was identified in series GD32F1x0, GD32F4xx, GD32F3x0 of GigaDevice Semiconductor products. The discovered vulnerability can be exploited by an attacker to take a snapshot of RAM before initialization or to chang...
GitLab: HTML injection possible with soft email confirmations when Administrator manually confirms attacker email address
The vulnerability allowed an attacker to include an HTML payload in their email address. If an administrator manually confirmed the attacker's unconfirmed email address, the HTML payload was rendered within the context of the self-hosted GitLab instance...
Malicious Package
Overview node-metrics-test-app is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...