18 matches found
EUVD-2026-53009
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
CVE-2026-18853
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
CVE-2026-18853: Improper Limitation of a Pathname to a Restricted Directory
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
CVE-2026-18853 ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
PT-2026-67895
Name of the Vulnerable Software and Affected Versions ZomboDroid Meme Generator App version 4.6830 Description A path traversal issue exists in the com.zombodroid.MemeGenerator component, specifically within the t5.l.c function. Path traversal is a flaw that allows an attacker to access files and...
CVE-2026-1745: Cross-Site Request Forgery (CSRF)
A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...
WordPress plugin Dental Optimizer Patient Generator App 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-13052: Improper Neutralization of Input During Web Page Generation
The Dental Optimizer Patient Generator App WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-1566: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...
CVE-2023-1006
The CVE-2023-1006 entry concerns SourceCodester Medical Certificate Generator App 1.0. Affected: the New Record Handler component. Vulnerability: cross-site scripting caused by manipulation of input arguments (Firstname, Middlename, Lastname, Suffix, Nationality, Doctor Fullname, Doctor Suffix) w...
CVE-2023-1006: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suff...
CVE-2023-0774
A vulnerability has been found in SourceCodester Medical Certificate Generator App 1.0 and classified as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument lastname leads to sql injection. The attack can be initiated remotely. The exploit ha...
CVE-2023-0774
CVE-2023-0774 describes a SQL injection vulnerability in the SourceCodester Medical Certificate Generator App 1.0, caused by unsafely handling the lastname parameter in the file action.php . The issue allows remote attackers to execute arbitrary SQL code, with confirmation of public disclosure an...
CVE-2023-0774: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Medical Certificate Generator App 1.0 and classified as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument lastname leads to sql injection. The attack can be initiated remotely. The exploit ha...
CVE-2023-0707 SourceCodester Medical Certificate Generator App function.php delete_record sql injection
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affected by this issue is the function deleterecord of the file function.php. The manipulation of the argument id leads to sql injection. VDB-220346 is the identifier assigned to this...
CVE-2023-0706: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.0. Affected by this issue is some unknown functionality of the file managerecord.php. The manipulation of the argument id leads to sql injection. The attack may be launched...
CVE-2023-0707: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affected by this issue is the function deleterecord of the file function.php. The manipulation of the argument id leads to sql injection. VDB-220346 is the identifier assigned to this...
Malicious code in free-fortnite-skins-2022-free-fortnite-skins-genertor-app-2022 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91aa527f0e9b5dec9e77a1abad6ee5cf7057f846b80536b3135f0ec0f23f069 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...