649 matches found
PT-2022-24603 · Unknown · Garage Management System
Name of the Vulnerable Software and Affected Versions: Garage Management System version 1.0 Description: The issue allows for arbitrary code execution. This can be achieved via the "ip/garage/php action/editProductImage.php" endpoint, specifically by manipulating the id variable. Recommendations:...
CVE-2022-36600
BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /blogengine/api/posts. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field...
CVE-2022-36687
Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...
PT-2022-23459 · Unknown · Edoc-Doctor-Appointment-System
Name of the Vulnerable Software and Affected Versions: Edoc-doctor-appointment-system version 1.0.1 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability is located at the "/patient/index.php" API endpoint and allows attackers to execute...
Default credentials
Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal details, such as email addresses and phone numbers of a specific user in a restaurant's loyalty program. Possibly allowing account takeover the mail can be used t...
CVE-2022-34774 Tabit - Arbitrary account modification
Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal details, such as email addresses and phone numbers of a specific user in a restaurant's loyalty program. Possibly allowing account takeover the mail can be used t...
VulnCheck KEV: CVE-2021-20166
Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton...
Cross Site Scripting (reflected) on fee_sheet_ajax.php
Description When testing the app for XSS we found out that the feesheetajax.php endpoint is actually vulnerable to an XSS exploit. PoC 1. visit https:///interface/forms/feesheet/review/feesheetajax.php?task=retrieve&mode=encounters&prevencounter=%3Cimg%20src%3da%20onerror%3dalertdocument.cookie%3...
PT-2022-22900 · Tenda · Tenda W6
Name of the Vulnerable Software and Affected Versions: Tenda W6 version 1.0.0.94122 Description: A command injection issue exists in the "/goform/exeCommand" API endpoint, allowing attackers to construct cmdinput parameters for arbitrary command execution. Recommendations: For Tenda W6 version...
Path Traversal
Description Via the /attachments/:id/download/thumbnails/:filename endpoint, an authenticated user can access any arbitrary file in the system through a path traversal vulnerability in the filename parameter. \ \ The filename parameter is not sanitized and its used to craft the path of the target...
U.S. Dept Of Defense: CSRF to delete accounts [HtUS]
Vulnerability description not provided...
U.S. Dept Of Defense: Account takeover on ███████ [HtUS]
Hello, I have found an endpoint in ████████ is vulnerable to Account takeover Steps to reproduce: 1. Create 2 accounts Attacker A and vicitm B 2. Log in to all of them and go to https://███████/███████/EditUserProfile with attacker's account 3. Now fill out the password with your password 4. Chan...
A.S. Watson Group : PII Disclosure At `theperfumeshop.com/register/forOrder`
A vulnerability was discovered that allowed unauthorized access to personally identifiable information of customers who placed orders on a website. By manipulating web requests, an attacker could view full name, address, phone number, order history and payment details of other customers. This...
Jenkins Plugin vRealize Orchestrator 跨站请求伪造漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins vRealize Orchestrator Plugin 3.0...
PT-2022-3909 · Robustel · Robustel R1510
Name of the Vulnerable Software and Affected Versions: Robustel R1510 version 3.3.0 Description: The issue is related to command injection vulnerabilities in the web server's ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker ca...
CVE-2022-31054 Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events
Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several HandleRoute endpoints make use of the deprecated ioutil.ReadAll. ioutil.ReadAll reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server wil...
GHSA-MQWH-R366-4224 Cabot Cross Site Scripting (XSS) vulnerability via Endpoint column
All versions up to 0.11.16 of package cabot are vulnerable to Cross-site Scripting XSS via the Endpoint column...
CVE-2022-30456
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting XSS via /bcms/classes/Master.php?f=savecourtrental...
smallrye-health-ui: persistent cross-site scripting in endpoint
It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...