3669 matches found
CVE-2023-33170
ASP.NET and Visual Studio Security Feature Bypass Vulnerability...
CVE-2023-36293
SQL injection vulnerability in wmanager v.1.0.7 and before allows a remote attacker to obtain sensitive information via a crafted script to the company.php component...
Cross site scripting
Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL...
CVE-2023-36163: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL...
CVE-2023-36163
Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL...
CVE-2023-36163
The CVE-2023-36163 entry documents a Cross-Site Scripting (XSS) vulnerability in IP-DOT BuildaGate v.BuildaGate5. The issue is exploitable via a crafted script injected into the URL parameter mc , enabling a remote attacker to execute arbitrary code. Public PoC details exist (ExploitDB) showing t...
IP-DOT BuildaGate 跨站脚本漏洞
IP-DOT BuildaGate is an application from IP-DOT, Inc. IP-DOT BuildaGate 5 suffers from a cross-site scripting vulnerability that originates from allowing a remote attacker to execute arbitrary code via a crafted script...
CVE-2023-3562
A vulnerability has been found in GZ Scripts PHP CRM Platform 1.8 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument action leads to cross site scripting. The attack can be initiated remotely. The identifier of this...
PT-2023-25463 · Unknown · Ip-Dot Buildagate
Name of the Vulnerable Software and Affected Versions: IP-DOT BuildaGate version BuildaGate5 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL. This is a Cross Site Scripting vulnerability. Recommendations: For IP-DOT...
PT-2023-7544 · Asus · Asus Armoury Crate +1
Name of the Vulnerable Software and Affected Versions: Asus Armoury Crate version 5.3.4.0 SetupAsusServices version 1.0.5.1 Description: The issue is related to an unquoted service path vulnerability in the SetupAsusServices module of Asus Armoury Crate. This vulnerability allows local users to...
codehaus-plexus: Directory Traversal
A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...
The vulnerability of .NET components in the communication protocol library for connecting components of ASU TP Triangle MicroWorks DNP3 Source Code Library, a control platform for managing public distribution and transmission networks of Schneider Electric Saitel DR RTU, allows a intruder to cause a service failure.
The vulnerability of .NET components in the communication protocol library used for connecting components of ASU systems like Triangle MicroWorks DNP3 Source Code Library in Schneider Electric Saitel DR RTU control platforms lies in the fact that the operation results are stored outside of the...
The vulnerabilities of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, related to deficiencies in access control, allow attackers to escalate their privileges.
The vulnerabilities of Microsoft’s software platforms such as the .NET Framework, .NET, and the Microsoft Visual Studio development tools are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
CVE-2023-36346
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...
Vulnerability of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio development tools, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, relates to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js. PoC 1 Make sure you have a public/ directory with files in it. 2 Make sure you have a public-isprivate directory with files in it. 3...
Online School Fees System SQL注入漏洞
Online School Fees System is an online tuition system. A SQL injection vulnerability exists in Online School Fees System v1.0, which originates from a lack of validation of the parameter namestartsWith for externally entered SQL statements in the file ajx.php in the component GET Parameter Handle...
CVE-2023-24897
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...