CVE-2023-23014

Cross Site Scripting XSS vulnerability in InventorySystem thru commit e08fbbe17902146313501ed0b5feba81d58f455c on Apr 23, 2021 via editstorename and editactive inputs in file InventorySystem.php...

PT-2023-18820 · Unknown · Inventorysystem

Name of the Vulnerable Software and Affected Versions: InventorySystem affected versions not specified Description: The issue is related to a Cross Site Scripting XSS vulnerability. It affects the InventorySystem via the edit store name and edit active inputs in the file InventorySystem.php...

The Best Ways to Automate SBOM Creation

By Owais Sultan SBOM or Software Bill of Materials implies a comprehensive inventory of all the constituent elements or components of the software. This is a post from HackRead.com Read the original post: The Best Ways to Automate SBOM Creation...

PowerHuntShares - Audit Script Designed In Inventory, Analyze, And Report Excessive Privileges Configured On Active Directory Domains

PowerHuntShares is design to automatically inventory, analyze, and report excessive privilege assigned to SMB shares on Active Directory domain joined computers. It is intented to help IAM and other blue teams gain a better understand of their SMB Share attack surface and provides data insights t...

GHSA-WQQV-JCFR-9F5G PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash

Impact DyeColorIdMap-fromId did not account for the possibility that it might be given invalid input. This means that an undefined offset error would occur whenever this happened. This code is indirectly called during Banner-deserializeCompoundTag, which is invoked when deserializing any item NBT...

PT-2023-33069 · Unknown · Pocketmine-Mp

Name of the Vulnerable Software and Affected Versions: PocketMine-MP affected versions not specified Description: The issue arises from the DyeColorIdMap-fromId function not handling invalid input properly, leading to an undefined offset error. This function is indirectly called during the...

Update 17.17 for Microsoft Dynamics 365 Business Central 2020 Release Wave 2 (Application Build 17.17.49465, Platform Build 17.0.49353)

None None...

Update 20.8 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 1 (Application Build 20.8.49971, Platform Build 20.0.49947)

None None...

Update 19.14 for Microsoft Dynamics 365 Business Central (on-premises) 2021 Release Wave 2 (Application Build 19.14.49970, Platform Build 19.0.49925)

None None...

Uncover what is really deployed in your environment with the enhanced Wiz inventory

Wiz adds full detection of cloud services for deeper visibility and control over shadow IT...

CVE-2022-44151

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php...

CVE-2022-44151

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php...

CVE-2022-44151

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php...

Sql injection

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php...

CVE-2022-44151

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php...

CVE-2022-44151

CVE-2022-44151 affects Simple Inventory Management System v1.0. The vulnerability is a SQL Injection in the login endpoint (/ims/login.php), caused by improper handling of user input. This can lead to unauthorized access to data and potential total compromise, with the CVSS v3.1 base score of 9.8...

Simple Inventory Management System SQL注入漏洞

Simple Inventory Management System is a simple inventory management system by Carlo Montero Personal Developer. A security vulnerability exists in Simple Inventory Management System v1.0, which stems from its /ims/login.php component that allows an attacker to implement SQL injection...

CVE-2022-44151

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php...

PT-2022-24969 · Unknown · Jerryhanjj Erp

Name of the Vulnerable Software and Affected Versions: jerryhanjj ERP affected versions not specified Description: A critical vulnerability was found in jerryhanjj ERP, affecting the uploadImages function of the file application/controllers/basedata/inventory.php in the Commodity Management...

UBUNTU-CVE-2022-39371

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Script related HTML tags in assets inventory information are not properly neutralized. This issue has...