Unrestricted file upload

Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information via audit logs...

CVE-2020-24804

Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information via audit logs...

CVE-2020-24804

Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information via audit logs...

CVE-2020-24804: Insertion of Sensitive Information into Log File

Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information via audit logs...

PT-2023-11731

Name of the Vulnerable Software and Affected Versions cms-dev/cms version 1.4.rc1 Description The issue allows attackers to gain sensitive information via audit logs due to a plaintext password vulnerability in AddAdmin.py. Recommendations For version 1.4.rc1, consider disabling the AddAdmin.py...

CVE-2020-24804

CVE-2020-24804 affects cms-dev/cms v1.4.rc1. The issue is in AddAdmin.py where plaintext passwords are written to audit logs, allowing an attacker to obtain sensitive information from logs. CVSSv3.1: 6.5 (MEDIUM); vector: Network, Low attack complexity, Local privileges, No user interaction, Conf...

CVE-2020-24804

Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information via audit logs...

PT-2025-40225

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the devfreq dev release function within the devfreq module of the Linux kernel. The issue stems from resources allocated by srcu init notifier head not being...

(0Day) Microsoft GitHub Dev-Containers Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Microsoft GitHub. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of Dev-Containers. The application does not enforce the privileged flag with...

CVE-2023-33665

ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

CVE-2023-33665

ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

CVE-2023-33665

ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

Sql injection

ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

CVE-2023-33666

ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

Sql injection

ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

CVE-2023-33665

ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

CVE-2023-33666: Improper Neutralization of Special Elements used in an SQL Command

ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

CVE-2023-33665: Improper Neutralization of Special Elements used in an SQL Command

ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

PT-2023-24445 · Unknown · Ai-Dev Aioptimizedcombinations

Name of the Vulnerable Software and Affected Versions: ai-dev aioptimizedcombinations versions prior to 0.1.3 Description: The issue is a SQL injection vulnerability via the component /includes/ajax.php. This vulnerability can be exploited, potentially allowing unauthorized access to database...

CVE-2023-33665

CVE-2023-33665 affects the PrestaShop-integrated component ai-dev aitable prior to v0.2.2. A SQL injection vulnerability exists in the /includes/ajax.php endpoint, enabling potentially unauthorized data access or modification. The available documents confirm the vulnerability and the affected com...