188 matches found
Malicious code in ycs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fcf222dfcf6f0f36588b0c11a3e0fd28bac1b86cccc3eac8afb5f9243afffb7 The OpenSSF Package Analysis project identified 'ycs' @ 3.9.9 npm as malicious. It is considered malicious because: - The package communicates...
Dawa pharma 1.0-2022 - Multiple SQL Injection Vulnerabilities
Title: dawa-pharma-1.0-2022 Multiple-SQLi Author: nu11secur1ty Vendor: https://www.mayurik.com/ Software: https://www.mayurik.com/source-code/P0349/best-pharmacy-billing-software-free-download Reference: https://portswigger.net/web-security/sql-injection Description: The email parameter appears t...
101 News 1.0 - Multiple-SQLi
Title: 101 News-1.0 Multiple-SQLi Author: nu11secur1ty Date: 09/16/2023 Vendor: https://mayurik.com/ Software: https://www.sourcecodester.com/php/16067/best-online-news-portal-project-php-free-download.html Reference: https://portswigger.net/web-security/sql-injection Description: The searchtitle...
CVE-2023-50704
An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate phishing attacks against application users...
CVE-2023-50704
An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate phishing attacks against application users...
CVE-2023-50704
EFACEC UC 500E is affected by CVE-2023-50704 (Open Redirect). Affected product: UC 500E (example 10.1.0); vulnerability arises when an attacker constructs a URL in the application that redirects to an arbitrary external domain, enabling phishing against users. Mitigation: EFACEC has released UC 5...
PT-2023-31610 · Efacec · Uc 500E +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain, which could be leveraged to facilita...
EFACEC UC 500 Input Validation Error Vulnerability
The EFACEC UC 500 is a solution from EFACEC Portugal that provides an integrated and flexible communications gateway, automation platform and HMI solution for utility and industrial applications. The EFACEC UC 500 suffers from an input validation error vulnerability that originates from an attack...
CVE-2020-17484
An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain...
CVE-2020-17484
An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain...
CVE-2023-5970
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...
CVE-2023-5970
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...
CVE-2023-5970
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...
PT-2023-32452 · Sonicwall · Sma100 Ssl-Vpn
Name of the Vulnerable Software and Affected Versions: SMA100 SSL-VPN virtual office portal affected versions not specified Description: The issue is related to improper authentication in the SMA100 SSL-VPN virtual office portal. This allows a remote authenticated attacker to create an identical...
Malicious code in node-common-npm-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02090694bde3634ac057c9ea4e4f37e4f65c597af5c1490bbe56a25e7acb8031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in iproduce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9793afabdea98cc294df5335305541ec8d48c6f0fe655e511f82c46d2bd5685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Travel 1.0 SQL Injection
Title: travel-1.0-by-oretnom23 Multiple-SQLi Author: nu11secur1ty Date: 11/12/2023 Vendor: https://github.com/oretnom23 Software: https://github.com/oretnom23/php-travel-agency-system Reference: https://portswigger.net/web-security/sql-injection Description: The search parameter appears to be...
Php travel agency system 1.0 by oretnom23 Multiple SQL injection Vulnerabilities
Title: travel-1.0-by-oretnom23 Multiple-SQLi Author: nu11secur1ty Vendor: https://github.com/oretnom23 Software: https://github.com/oretnom23/php-travel-agency-system Reference: https://portswigger.net/web-security/sql-injection Description: The search parameter appears to be vulnerable to SQL...
Online Diagnostic Lab Management 1.0 SQL Injection Vulnerability
Title: Online-Diagnostic-Lab-Management v1.0 Multiple-SQLi Author: nu11secur1ty Vendor: https://www.youtube.com/watch?v=0nA5xfQ5G0g Vendor: https://www.youtube.com/@MayuriK Software:...
Vaidya-Mitra 1.0 - Multiple SQL injection Vulnerability
Title: Vaidya-Mitra 1.0 - Multiple SQLi Author: nu11secur1ty Vendor: https://mayurik.com/ Software: free: https://www.sourcecodester.com/php/16720/free-hospital-management-system-small-practices.html, https://mayurik.com/source-code/P5890/best-hospital-management-system-in-php Reference:...