Vulnerabilities fixed in Cisco Secure Firewall systems

Cisco has fixed several vulnerabilities in Cisco Secure Firewall including ASA and FTD software. The vulnerabilities include SQL injection, privilege escalation, denial-of-service, cross-site scripting, and improper management of entries in various Cisco Secure Firewall components. Authenticated...

CVE-2025-42899 Missing Authorization check in SAP S4CORE (Manage Journal Entries)

SAP S4CORE Manage journal entries does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges. This has low impact on confidentiality of the application with no impact on integrity and availability of the application...

EUVD-2021-30955

Malicious code in bioql PyPI...

EUVD-2022-52742

Malicious code in bioql PyPI...

CVE-2022-49183 net/sched: act_ct: fix ref leak when switching zones

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix ref leak when switching zones When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That's because tcfctskbnfctcached returns fals...

CVE-2022-31084 Unauthenticated Remote Code Execution in ldap-account-manager

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 There are cases where LAM instantiates objects from arbitrary classes. An attacker can inject the first constructor argument. This can lead to cod...

EGavilan Media Contact-Form-With-Messages-Entry-Management SQL注入漏洞

EGavilan Media Contact-Form-With-Messages-Entry-Management is a simple contact form system from EGavilan Media. EGavilan Media Contact-Form-With-Messages-Entry -Management version 1.0 contains a SQL injection vulnerability that stems from vulnerability to SQL injection attacks via Addmessage.php....

Guru Auction 2.0 multiple sql injection and fix-vulnerability warning-the black bar safety net

Guru Auction 2.0 Multiple SQL Injection Vulnerabilities Author : v3n0m Application : Guru Auction 2.0 Price : $4 9 Vendor : http://www.guruscript.com/ Google Dork : inurl:subcat. php? cateid= SQLi p0c: http://domain.tld/path/subcat. php? cateid=-9999+union+all+select+null,groupconcatusername,char...