894 matches found
CVE-2021-30112
Web-School ERP V 5.0 contains a cross-site request forgery CSRF vulnerability that allows a remote attacker to create a studentleaveapplication request through module/core/studentleaveapplication/create. The application fails to validate the CSRF token for a POST request using Guardian privilege...
PT-2021-18606
Name of the Vulnerable Software and Affected Versions Web-School ERP version 5.0 Description The issue allows a remote attacker to create a student leave application request through the "module/core/studentleaveapplication/create" API endpoint. This is due to the application's failure to validate...
Web-School ERP 跨站请求伪造漏洞
Web-School ERP is a school management software for schools and educational organizations. A cross-site request forgery vulnerability exists in Web-School ERP version 5.0. An attacker can exploit this vulnerability to create a studentleaveapplication request via...
Matrix Synapse License Issue Vulnerability
Matrix Synapse is a Matrix Management Server implementation from the Matrix Foundation in the UK. Matrix Synapse suffers from a security vulnerability that stems from the fact that a malicious or poorly implemented host server can inject malformed events by specifying different room ids in the pa...
SQL Injection Vulnerability in Appform for Leave System
Qixing Leave System includes leave, overtime, approval, annual leave, transfer, work calendar and report modules. SQL injection vulnerability exists in the Leave System Appform, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2019-12522
An issue was discovered in Squid through 4.7. When Squid is run as root, it spawns its child processes as a lesser user, by default the user nobody. This is done via the leavesuid call. leavesuid leaves the Saved UID as 0. This makes it trivial for an attacker who has compromised the child proces...
The vulnerability of the Border Gateway Protocol (BGP) implementation in Ethernet VPN technology of the Cisco IOS XR operating system allows a attacker to cause a service failure.
The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Multicast Leav...
The vulnerability of the Border Gateway Protocol (BGP) implementation in Ethernet VPN technology of the Cisco IOS XR operating system allows a attacker to cause a service failure.
The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Multicast Leav...
PYSEC-2019-186
Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /sendjoin, /sendleave, and /invite may not be correctly signed, or may not come from the expected servers...
UBUNTU-CVE-2019-18835
Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /sendjoin, /sendleave, and /invite may not be correctly signed, or may not come from the expected servers...
PT-2019-15690 · Matrix +2 · Matrix Synapse +2
Name of the Vulnerable Software and Affected Versions: Matrix Synapse versions prior to 1.5.0 Description: The issue concerns the mishandling of signature checking on some federation APIs. Events sent over "/send join", "/send leave", and "/invite" API endpoints may not be correctly signed, or ma...
Sentrifugo 3.2 - Persistent Cross-Site Scripting
Sentrifugo 3.2 - Persistent Cross-Site Scripting Exploit Title: Sentrifugo 3.2 - Persistent Cross-Site Scripting Google Dork: N/A Date: 8/29/2019 Exploit Author: creosote Vendor Homepage: http://www.sentrifugo.com/ Version: 3.2 Tested on: Ubuntu 18.04 CVE : CVE-2019-15814 Multiple Stored XSS...
Sentrifugo 3.2 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Sentrifugo 3.2 - Persistent Cross-Site Scripting Exploit Author: creosote Vendor Homepage: http://www.sentrifugo.com/ Version: 3.2 Tested on: Ubuntu 18.04 CVE : CVE-2019-15814 Multiple Stored XSS vulnerabilities were found in...
kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c
A flaw was found in the Linux Kernel in the ucmaleavemulticast function in drivers/infiniband/core/ucma.c which allows access to a certain data structure after freeing it in ucmaprocessjoin. This allows an attacker to cause a use-after-free bug and to induce kernel memory corruption, leading to a...
PT-2020-9333
Name of the Vulnerable Software and Affected Versions: Squid versions through 4.7 Description: An issue was discovered in Squid when it is run as root. It spawns its child processes as a lesser user, by default the user nobody, via the leave suid call. The leave suid call leaves the Saved UID as ...
kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c
A flaw was found in the Linux Kernel in the ucmaleavemulticast function in drivers/infiniband/core/ucma.c which allows access to a certain data structure after freeing it in ucmaprocessjoin. This allows an attacker to cause a use-after-free bug and to induce kernel memory corruption, leading to a...
CVE-2018-12652
A Reflected Cross Site Scripting XSS Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the LeaveEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter...
CVE-2019-9573
The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...
