26 matches found
EUVD-2024-39585
Malicious code in bioql PyPI...
EUVD-2024-40875
Malicious code in bioql PyPI...
EUVD-2024-39576
Malicious code in bioql PyPI...
CVE-2024-44115
The RFC enabled function module allows a low privileged user to add URLs to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces, and nodes. There is low impact on integrity of the application...
CVE-2024-44116
The RFC enabled function module allows a low privileged user to add any workbook to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces. There is low impact on integrity of the application...
CVE-2024-42380
The RFC enabled function module allows a low privileged user to read any user's workplace favourites and user menu along with all the specific data of each node. Usernames can be enumerated by exploiting vulnerability. There is low impact on confidentiality of the application...
CVE-2024-42371
The RFC enabled function module allows a low privileged user to delete the workplace favourites of any user. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces and nodes. There is low impact on integrity and availability of the...
CVE-2024-44115
The RFC enabled function module allows a low privileged user to add URLs to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces, and nodes. There is low impact on integrity of the application...
CVE-2024-44116
The RFC enabled function module allows a low privileged user to add any workbook to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces. There is low impact on integrity of the application...
CVE-2024-42380
The RFC enabled function module allows a low privileged user to read any user's workplace favourites and user menu along with all the specific data of each node. Usernames can be enumerated by exploiting vulnerability. There is low impact on confidentiality of the application...
CVE-2024-44116
CVE-2024-44116 concerns SAP NetWeaver ABAP/ABAP Platform where an RFC-enabled function module can be abused by a low-privileged user to add any workbook to any user’s workplace favourites. The consequence is exposure of usernames and access information about targeted users’ workplaces, with low i...
PT-2024-29905 · Sap · Sap Rfc Function Module
Name of the Vulnerable Software and Affected Versions: SAP RFC function module affected versions not specified Description: The RFC enabled function module allows a low privileged user to delete the workplace favourites of any user. This issue could be utilized to identify usernames and access...
Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
CSRF Set 1 modify invoice status Medium severity Description CSRF in saving invoices / modifying status of invoices pending and cancel only Proof of Concept The following state-changing endpoints are vulnerable to CSRF GET...
How to land on the Favourites view under Apps on StoreFront 1912?
To set the default landing page to 'Favourites' under the apps tab in 1912. By default, the landing page is 'Home'. The below script would help in achieving the same: Step 1: In the Storefront console, navigate to 'Manage Receiver for Web Sites' Step 2: Click configure and browse to 'Client...
Citrix Store Front 3.0 Unable to save favourites in Store Front
Unable to save favourites in Store Front...
NGS00141 Technical Advisory: Websense Triton 7.6 stored XSS in report management UI
======= Summary ======= Name: Websense Triton 7.6 stored XSS in report management UI Release Date: 30 April 2012 Reference: NGS00141 Discoverer: Ben Williams [email protected] Vendor: Websense Vendor Reference: Systems Affected: Risk: High Status: Published ======== TimeLine ========...
Internet Explorer Overflow
------------------------------------------- IE Add Favourites Stack Buffer Overflow POC Sberry, Compaq ------------------------------------------- function go var str =unescape'%u4141'; var finalstr = createInlineBufferstr, 5150000; var len = finalstr.length; document.writelen; addfavfinalstr; /...
CVE-2008-6007
SQL injection vulnerability in viewgroup.php in QuidaScript BookMarks Favourites Script APB allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in viewgroup.php in QuidaScript BookMarks Favourites Script APB allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6007
CVE-2008-6007 describes an SQL injection in QuidaScript BookMarks Favourites Script (APB) where the vulnerability exists in view_group.php and is exploitable via the id parameter. The root cause is unsanitized input leading to arbitrary SQL execution, with potential impact including data access o...