Improper access control

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

CVE-2022-30016

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

CVE-2022-30016

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

CVE-2022-30016

CVE-2022-30016 affects Rescue Dispatch Management System 1.0. The issue is an Incorrect Access Control vulnerability that allows unauthorized access via the URL path: /rdms/admin/?page=system_info on localhost. The connected reports consistently describe an access-control error without detailing ...

CVE-2022-30016

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

CVE-2022-30017: Improper Neutralization of Input During Web Page Generation

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

PT-2022-19973

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue allows for Stored XSS, which can lead to admin account takeover via cookie stealing. Recommendations For Rescue Dispatch Management System version 1.0, consider disabling the...

PT-2022-19972

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue is related to Incorrect Access Control. It can be exploited via the API endpoint "http://localhost/rdms/admin/?page=system info". Recommendations For Rescue Dispatch Managemen...

Rescue Dispatch Management System Cross-site Scripting Vulnerability

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. rescue dispatch management system is vulnerable to a cross-site scripting vulnerability that could be exploited to inject malicious JavaScript programs, steal other user cookies, etc...

Rescue Dispatch Management System Access Control Vulnerability

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. version 1.0 of Rescue Dispatch Management System contains an access control error vulnerability that could be exploited by attackers to cause unauthorized access...

CVE-2022-30016: Incorrect Authorization

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

Robocode Arbitrary Code Execution

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...

PT-2022-30614

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a use-after-free in bfq dispatch request. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29751

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a use-after-free in bfq dispatch request. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

CVE-2022-24272

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6...

Input validation

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6...

UBUNTU-CVE-2022-24272

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6...