CVE-2024-7071 Unauthenticate SQLi in Brain Information Technologies' Brain Low-Code

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', CWE - 564 - SQL Injection: Hibernate vulnerability in Brain Information Technologies Inc. Brain Low-Code allows SQL Injection. This issue affects Brain Low-Code: before 2.1.0...

SPIP 4.2.11 Code Execution

============================================================================================================================================= | Title : SPIP 4.2.11 PHP Code execution Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 129.0.1 64 bits ...

CVE-2024-42339

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42338

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42337

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42340 CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security

CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security...

CVE-2024-42340 CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security

CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security...

CVE-2024-42339 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42338 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42338 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42337

Technical details (affected products/versions, root cause, impact or remediation) for CVE-2024-42337 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2024-42337 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42337: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42340: Client-Side Enforcement of Server-Side Security

CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security...

GHSA-FRP2-5QFC-7R8M request_store has Incorrect Default Permissions

Impact The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of thi...

apex.sia.org.sg Cross Site Scripting vulnerability OBB-3960334

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

slmedia.ca Cross Site Scripting vulnerability OBB-3960320

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

devxpress.ca Cross Site Scripting vulnerability OBB-3960317

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

coe.edu Cross Site Scripting vulnerability OBB-3960308

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

visitliberec.eu Cross Site Scripting vulnerability OBB-3960306

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...