CVE-2024-0306

CVE-2024-0306 affects Kashipara Dynamic Lab Management System (versions up to 1.0). The vulnerability is an SQL injection in the file /admin/admin_login_process.php caused by manipulation of the admin_password argument. It can be exploited remotely and the exploit has been publicly disclosed. Imp...

CVE-2024-0306 Kashipara Dynamic Lab Management System admin_login_process.php sql injection

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminloginprocess.php. The manipulation of the argument adminpassword leads to sql injection. It is possible to initiate the attack...

PT-2024-15457 · Unknown · Kashipara Dynamic Lab Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Dynamic Lab Management System versions up to 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /admin/admin login process.php. The manipulation of the admin password argument leads to S...

Kashipara Dynamic Lab Management System SQL Injection Vulnerability

Kashipara Dynamic Lab Management System is a dynamic lab management system from Kashipara. A SQL injection vulnerability exists in Kashipara Dynamic Lab Management System 1.0 and earlier versions, which originates from a SQL injection vulnerability in the file loginprocess.php...

PT-2024-15458 · Unknown · Kashipara Dynamic Lab Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Dynamic Lab Management System versions up to 1.0 Description: A critical vulnerability has been found in the Kashipara Dynamic Lab Management System. The issue affects unknown code in the file login process.php. The manipulation of...

Kashipara Dynamic Lab Management System SQL Injection Vulnerability

Kashipara Dynamic Lab Management System is a dynamic lab management system from Kashipara. A SQL injection vulnerability exists in Kashipara Dynamic Lab Management System 1.0 and earlier versions, which originates from a SQL injection vulnerability in the file /admin/adminloginprocess.php...

GHSA-MCPH-M25J-8J63 tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)

Summary The tj-actions/changed-files workflow allows for command injection in changed filenames, allowing an attacker to execute arbitrary code and potentially leak secrets. Details The changed-files action returns a list of files changed in a commit or pull request which provides an escapejson...

CVE-2023-50826

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Freshlight Lab Menu Image, Icons made easy allows Stored XSS.This issue affects Menu Image, Icons made easy: from n/a through 3.10...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Freshlight Lab Menu Image, Icons made easy allows Stored XSS.This issue affects Menu Image, Icons made easy: from n/a through 3.10...

CVE-2023-50826

CVE-2023-50826 : Stored XSS in the WordPress plugin Menu Image, Icons made easy (affected through 3.10). The vulnerability is described as an input handling issue during web page generation (XSS) and is currently listed as Unpatched per the connected documents; patch/update availability is not pr...

PT-2023-31657 · Unknown · Freshlight Lab Menu Image

Name of the Vulnerable Software and Affected Versions: Freshlight Lab Menu Image, Icons made easy versions n/a through 3.10 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS, which means...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type vulnerability in AmaderCode Lab Dropshipping & Affiliation with Amazon.This issue affects Dropshipping & Affiliation with Amazon: from n/a through 2.1.2...

CVE-2023-31215

CVE-2023-31215 arises from an Unrestricted Upload of File with Dangerous Type in the WordPress plugin Dropshipping & Affiliation with Amazon (WP Amazon Shop) for versions

CVE-2023-31215 WordPress Dropshipping & Affiliation with Amazon Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in AmaderCode Lab Dropshipping & Affiliation with Amazon.This issue affects Dropshipping & Affiliation with Amazon: from n/a through 2.1.2...

GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182

Impact Issue: Arbitrary file write in file.py GHSL-2023-183 Patches Use mindsdb staging branch or v23.11.4.1...

Exploit for Injection in Vm2_Project Vm2

CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerabili...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2023-46604 Lab This lab guides on exploiting vulnerabiliti...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2023-46604 Lab This lab guides on exploiting vulnerabiliti...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2023-46604 Lab This lab guides on exploiting vulnerabiliti...

OctoberCMS v3.4.0 (About) Stored Cross-Site Scripting Vulnerability

Summary OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application framework. It supports MySQL, SQLite and PostgreSQL for the database back end and uses a flat file database for the front end structure. The October CMS covers a ran...