13319 matches found
HGiga OAKlouds Path Traversal Vulnerability
Hgiga Oaklouds is an enterprise collaborative work portal network of China Henderson Technology Hgiga Company. It is used for just-in-time communication and resource reservation. A path traversal vulnerability exists in HGiga OAKlouds. An attacker can exploit this vulnerability to read and delete...
CVE-2024-25211
Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/deletecategory.php...
CVE-2024-25212
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...
CVE-2024-25211
Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/deletecategory.php...
CVE-2024-25209
Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/delete-resident.php...
CVE-2024-25210
Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/deleteexpense.php...
Sql injection
Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/deleteexpense.php...
registry-support: decompress can delete files outside scope via relative paths
A vulnerability was found in the decompression function of registry-support. This issue can be triggered by an unauthenticated remote attacker when tricking a user into opening a specially modified .tar archive, leading to the cleanup process following relative paths to overwrite or delete files...
CVE-2024-1485
A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite o...
Design/Logic Flaw
A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite o...
PT-2024-20821 · Unknown · Simple Expense Tracker
Name of the Vulnerable Software and Affected Versions: Simple Expense Tracker version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the category parameter at the "/endpoint/delete category.php" endpoint. Recommendations: For Simple...
Barangay Population Monitoring System SQL Injection Vulnerability
Barangay Population Monitoring System is a regional population monitoring system by the individual developer Remy Andrade. A security vulnerability exists in Barangay Population Monitoring System version 1.0, which originates from a SQL injection vulnerability in the file...
PT-2024-20818 · Unknown · Barangay Population Monitoring System
Name of the Vulnerable Software and Affected Versions: Barangay Population Monitoring System version 1.0 Description: The system contains a SQL injection vulnerability via the resident parameter at the "/endpoint/delete-resident.php" endpoint. This issue allows for potential exploitation...
PT-2024-20820 · Unknown · Simple Expense Tracker
Name of the Vulnerable Software and Affected Versions: Simple Expense Tracker version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the expense parameter at the "/endpoint/delete expense.php" API endpoint. Recommendations: For Simp...
Expense Tracker SQL Injection Vulnerability
Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in Simple Expense Tracker v1.0, which originates from a SQL injection vulnerability in the file /endpoint/deletecategory.php...
PT-2024-20822 · Unknown · Employee Management System
Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/delete.php" API endpoint. Recommendations: For Employee Managment Syst...
Expense Tracker SQL Injection Vulnerability
Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in Expense Tracker v1.0, which stems from a SQL injection vulnerability in the file /endpoint/deleteexpense.php...
PT-2024-3143 · WordPress · Tutor Lms
Name of the Vulnerable Software and Affected Versions: Tutor LMS plugin for WordPress versions up to, and including, 2.6.1 Description: The issue is related to a missing capability check on the tutor delete announcement function, which can allow authenticated attackers with subscriber-level acces...
The vulnerability of the official interface for developing container applications in Plone Docker allows a hacker to gain access to modify or delete files.
The vulnerability of the official Plone Docker image for container applications lies in the absence of a mechanism to prevent unintended modifications to resources during request processing. Exploiting this vulnerability could allow an attacker to gain access to modify or delete files using PUT a...
