3500 matches found
CVE-2022-25787
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...
CVE-2022-25787 GTA URLs issued by LMM WEB API may leak information
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7...
CVE-2022-25787
The CVE concerns Secomea GateManager, specifically its LMM API: Information Exposure Through Query Strings in GET requests can leak information via the GATE LMM API, allowing a local attacker (or an admin) to hijack connections. Affected are all GateManager versions prior to 9.7. The root cause i...
CVE-2022-25778 Unload handlers may unintentionally defeat CSRF guards
Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...
GHSA-PQR5-9V2J-44XG Apache Tomcat DoS via Malicious Get Request
Tomcat 4.0 through 4.1.12, using modjk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service desynchronized communications via an HTTP GET request with a Transfer-Encoding chunked field with invalid values...
Apache Tomcat DoS via Malicious Get Request
Tomcat 4.0 through 4.1.12, using modjk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service desynchronized communications via an HTTP GET request with a Transfer-Encoding chunked field with invalid values...
CVE-2022-28994
Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...
CVE-2022-28994
Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...
Buffer overflow
Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...
CVE-2022-28994
Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...
Roundup Directory traversal vulnerability
Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. dot dot sequences in an @@ command in an HTTP GET request...
Small HTTP Server 安全漏洞
Small Http Server is a small Http server from the individual developer Max Feoktistov. A security vulnerability exists in Small Http Server version 3.06, which stems from a remote buffer overflow vulnerability caused by a long GET request...
Cross Site Request Forgery in Release all grades feature
Description Hi there, there is a Cross site request Forgery in your Release all grades feature. This is due to the release all grades action is using GET request method. Cross-Site Request Forgery CSRF is an attack that forces an end user to execute unwanted actions on a web application in which...
The vulnerability of the FortiOS operating systems and the FortiProxy proxy server, related to errors in processing the relative path to the directory, allows attackers to gain unauthorized access to protected information and enhance their privileges.
The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized...
Cross-site Scripting (XSS) - Generic
Description The Stream URL of octoprint application allowing xss payload to execute for which its leads to Cross-site Scripting XSS Proof of Concept Login to the application Now go to settings - Webcam & Timelapse - Stream URL and insert the payload " in the Stream URL and click on "Test" You wil...
ResearchGate Automatic Question Paper Generator System SQL Injection Vulnerability
ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...
ResearchGate Automatic Question Paper Generator System SQL注入漏洞
ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...
