PT-2025-42894

Name of the Vulnerable Software and Affected Versions Log2Space Subscriber Management Software version 1.1 Description Log2Space Subscriber Management Software version 1.1 contains a SQL injection flaw. An attacker can send a crafted POST request to the /l2s/api/selfcareLeadHistory endpoint,...

CVE-2025-56450: Improper Neutralization of Special Elements used in an SQL Command

Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the leadid parameter in the /l2s/api/selfcareLeadHistory endpoint. A remote attacker can exploit this by sending a specially crafted POST request, resulting in the execution of arbitrary SQL queries. T...

If the Ethereum Merge Fails, L2s Will Be More Vital Than Ever

By Waqas Ethereum merge is an upgrade to the Ethereum blockchain which will happen in mid-September 2022. This is a post from HackRead.com Read the original post: If the Ethereum Merge Fails, L2s Will Be More Vital Than Ever...

l2s-recht.de Cross Site Scripting vulnerability OBB-2163196

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...