13498 matches found
Sql injection
SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component...
Information disclosure
An issue in Knovos Discovery v.22.67.0 allows a remote attacker to obtain sensitive information via the /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName component...
CVE-2023-47459
An issue in Knovos Discovery v.22.67.0 allows a remote attacker to obtain sensitive information via the /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName component...
Knovos Discovery Security Vulnerability
Knovos Discovery is a comprehensive legal discovery platform from Knovos. A security vulnerability exists in Knovos Discovery version v.22.67.0, which stems from the presence of a SQL injection vulnerability that allows remote attackers to execute arbitrary code via the...
CVE-2023-47459
An issue in Knovos Discovery v.22.67.0 allows a remote attacker to obtain sensitive information via the /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName component...
CVE-2023-47459
CVE-2023-47459 concerns Knovos Discovery v.22.67.0. The issue enables a remote attacker to obtain sensitive information via the endpoint "/DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName". The available connected sources confirm the affected version and the specific component path, ...
Knovos Discovery Security Vulnerability
Knovos Discovery is a comprehensive legal discovery platform from Knovos, Inc. A security vulnerability exists in Knovos Discovery version v.22.67.0, which originated from a vulnerability that allows remote attackers to obtain sensitive information via the...
CVE-2023-47460
SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component...
CVE-2023-47460
SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component...
EDK2 Security Vulnerability
EDK2 is a set of cross-platform firmware development environments from the Tianocore community based on the UEFI and PI specifications. A security vulnerability exists in EDK2 that stems from the Network Package's susceptibility to an out-of-bounds read vulnerability when handling neighbor...
PT-2024-1142
Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description The issue is related to an out-of-bounds read vulnerability when processing Neighbor Discovery Redirect messages in EDK2's Network Package. This can be exploited by an attacker to gain...
CVE-2023-47460
CVE-2023-47460 affects Knovos Discovery v.22.67.0. A SQL injection in the endpoint /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure lets a remote attacker execute arbitrary code with high impact (C,H/I,H/A,H) and network attack vector. Public references in Red Hat, NVD, CNNVD, and other...
gtspirit.gr Improper Access Control vulnerability OBB-3833328
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-28897 Hard-coded password for UDS services
The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III 3V3 - 2.0 TDI manufactured in 2022...
kanesuzu.co.jp Cross Site Scripting vulnerability OBB-3832874
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
discovery-travel.gr Improper Access Control vulnerability OBB-3832328
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Wallarm Named a Leader in GigaOm Radar for API Security
I am thrilled to share that Wallarm, has been named a leader in the GigaOm Radar for API Security! We would like to share insights from the recent GigaOm 2023 API Security Radar report, particularly shining a spotlight on our Advanced API Security solution. The growing importance of APIs and API...
PHPJabbers Event Booking Calendar 4.0 Cross Site Scripting / HTML Injection
Exploit Title: PHPJabbers Event Booking Calendar v4.0 - Multiple Stored XSS Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/event-booking-calendar/sectionDemo Version: v4.0 Tested o...
PHPJabbers Car Park Booking System 3.0 Missing Rate Limiting
Exploit Title: PHPJabbers Car Park Booking System v3.0 - Missing Rate Limiting Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/car-park-booking/sectionDemo Version: v3.0 Tested on:...