13329 matches found
Mozilla: After the upload of an private file, using transformations, the file becomes public without the possibility of changing it.
A security vulnerability allowed users to upload private files, but the use of transformations made the files public without the ability to change or delete them...
CVE-2023-2656
A vulnerability classified as critical has been found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file /classes/Master.php?f=deleteservice. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
AC Repair and Services System SQL注入漏洞
AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. SourceCodester AC Repair and Services System version 1.0 suffers from a SQL injection vulnerability that stems from a problem with the file /classes/Master.php?f=deleteservice, whe...
SourceCodester Lost and Found Information System SQL注入漏洞
Lost and Found Information System is a lost and found information system by oretnom23 individual developer. SourceCodester Lost and Found Information System version 1.0 suffers from a SQL injection vulnerability that stems from a problem with the file /classes/Master.php?f=deleteitem, which can...
PT-2023-20699 · Sourcecodester · Sourcecodester Lost/Found Information System
Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /classes/Master.php?f=delete item. This issue leads to sql injection and can be exploite...
PT-2023-20022 · Fetlife · Fetlife Rollout-Ui
Name of the Vulnerable Software and Affected Versions: Fetlife rollout-ui version 0.5 Description: The issue allows attackers to execute arbitrary code via a crafted URL to the delete a feature functionality. This is a Cross Site Scripting XSS vulnerability. Recommendations: For Fetlife rollout-u...
Google Announces New Privacy, Safety, and Security Features Across Its Services
Google unveiled a slew of new privacy, safety, and security features today at its annual developer conference, Google I/O. The tech giant's latest initiatives are aimed at protecting its users from cyber threats, including phishing attacks and malicious websites, while providing more control and...
The vulnerability of the CreateOrConfigureAsync function on the Docker Desktop for Windows development and delivery platform allows a malicious actor to gain read, modify, or delete access to data.
The vulnerability of the CreateOrConfigureAsync function on the Docker Desktop for Windows development and delivery platform is related to errors in handling symbolic links with the DataFolder parameter. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to...
The vulnerability of the Git repository management system Gitea lies in its ability to bypass authentication procedures by using capture-replay techniques for intercepted parameters. This allows attackers to circumvent security restrictions, gain unauthorized access to read, modify, or delete data, or execute arbitrary code.
The vulnerability of the Git repository management system Gitea relates to exploiting a authentication process by using capture-replay techniques to intercept and replay captured parameters. Exploiting this vulnerability allows an attacker operating remotely to circumvent security restrictions,...
CVE-2023-20098
Cisco SD-WAN vManage Software’s CLI has a directory-traversal filtering flaw in system commands. An authenticated, local attacker with administrative privileges could exploit this to delete arbitrary files, including root-owned files. Root cause: improper filtering of directory traversal sequence...
kernel: use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c
A vulnerability was found in the Linux Kernel in the l2capconndel in net/bluetooth/l2capcore.c function in the Bluetooth component. This issue leads to a use-after-free problem...
kernel: use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c
A vulnerability was found in the Linux Kernel in the l2capconndel in net/bluetooth/l2capcore.c function in the Bluetooth component. This issue leads to a use-after-free problem...
Cisco SD-WAN vManage 路径遍历漏洞
Cisco SD-WAN vManage is a highly customizable dashboard from Cisco, Inc. It simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. A security vulnerability exists in Cisco SD-WAN vManage that stems from improper filtering of directory traversal characte...
Rocket.Chat 授权问题漏洞
Rocket.Chat is an open source team chat software. Rocket.Chat suffers from an authorization issue vulnerability. An attacker could use this vulnerability to bypass authentication and delete user messages...
CVE-2023-31178
AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete Vulnerability allows arbitrary file deletion, by an unspecified request...
CVE-2020-22334
Cross Site Request Forgery CSRF vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/adminadmin.php...
PT-2023-11615 · Beescms · Beescms
Name of the Vulnerable Software and Affected Versions: beescms version 4 Description: A Cross Site Request Forgery CSRF issue allows attackers to delete the administrator account via a crafted request to "/admin/admin admin.php". This can be exploited by sending a malicious request to the specifi...
CVE-2023-31178
AgilePoint NX v8.0 SU2.2 and SU2.3 are affected by an Arbitrary File Delete vulnerability. The issue allows deletion of arbitrary files via an unspecified request. Root cause is not detailed in the provided documents, and there is no explicit remediation or fix information in the connected sources.
