BIT-CODEIGNITER-2022-40829

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orlike function...

Cross-site Scripting (XSS)

urql/next is vulnerable to Cross-site scripting XSS. The vulnerability is due to improper sanitization of HTML-like characters in the response stream. An attacker can inject malicious scripts by ensuring that the response returns html tags and that the web-application is using streamed responses...

CVE-2024-24556 XSS in @urql/next

urql is a GraphQL client that exposes a set of helpers for several frameworks. The @urql/next package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns html tags and that the web-application is using streamed responses non-RSC. This vulnerability is...

CVE-2023-6258

A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards PKCS11. If exploited successfully, this vulnerability could result in a Bleichenbacher-like security flaw, potentially enabling a side-channel attack on PKCS1 1.5...

CVE-2023-6258

A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards PKCS11. If exploited successfully, this vulnerability could result in a Bleichenbacher-like security flaw, potentially enabling a side-channel attack on PKCS1 1.5...

Security feature bypass

A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards PKCS11. If exploited successfully, this vulnerability could result in a Bleichenbacher-like security flaw, potentially enabling a side-channel attack on PKCS1 1.5...

CVE-2023-6258

A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards PKCS11. If exploited successfully, this vulnerability could result in a Bleichenbacher-like security flaw, potentially enabling a side-channel attack on PKCS1 1.5...

CVE-2023-6258

A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards PKCS11. If exploited successfully, this vulnerability could result in a Bleichenbacher-like security flaw, potentially enabling a side-channel attack on PKCS1 1.5...

CVE-2024-1028

A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Post Handler. The manipulation of the argument Description with the input HACKED leads to cross site scripting. T...

CVE-2024-1028

CVE-2024-1028 affects SourceCodester Facebook News Feed Like 1.0. The vulnerability lies in the Post Handler’s Description argument, where input such as HACKED triggers cross-site scripting. Exploitation is reported to be remotely possible and the exploit has been disclosed publicly (VDB-252301)....

CVE-2024-1027

A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...

CVE-2024-1027 SourceCodester Facebook News Feed Like Post unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...

CVE-2024-1027

CVE-2024-1027 is a vulnerability in the Post Handler of SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function in Post Handler, with an unrestricted file upload vulnerability that can be exploited remotely. Multiple connected sources corroborate the issue, describing a critic...

Cross site scripting

A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input alert1 leads to cross site scripting. The...

CVE-2024-1024

CVE-2024-1024 affects SourceCodester Facebook News Feed Like 1.0, specifically the New Account Handler component. The vulnerability is a cross-site scripting flaw triggered by unvalidated input in the First Name/Last Name field (example payload: ), allowing remote initiation. Multiple sources cor...

PT-2024-14916 · Unknown · Pkcs11-Provider

Name of the Vulnerable Software and Affected Versions: pkcs11-provider affected versions not specified Description: A security issue has been identified in the pkcs11-provider, associated with Public-Key Cryptography Standards PKCS11. If exploited, this could result in a Bleichenbacher-like...

SourceCodester Facebook News Feed Like Code Issue Vulnerability

Facebook News Feed Like is a Facebook-like application by oretnom23 individual developer. A code issue vulnerability exists in SourceCodester Facebook News Feed Like version 1.0 that stems from the presence of an unrestricted file upload vulnerability...

PT-2024-16149 · Sourcecodester · Sourcecodester Facebook News Feed Like

Name of the Vulnerable Software and Affected Versions: SourceCodester Facebook News Feed Like version 1.0 Description: A critical issue was found in the Post Handler component, allowing for unrestricted upload. This can be exploited remotely. Recommendations: For version 1.0, consider disabling t...

PT-2024-16132 · Sourcecodester · Sourcecodester Facebook News Feed Like

Name of the Vulnerable Software and Affected Versions: SourceCodester Facebook News Feed Like version 1.0 Description: A problematic issue has been found, affecting the New Account Handler component. The manipulation of the First Name/Last Name argument with the input alert1 leads to cross-site...

Webmin cross-site scripting vulnerability (CNVD-2024-06437)

Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site scripting vulnerability exists in Webmin v.2.105 and earlier versions, which stems from the application's lack of effective filtering and escaping of user-supplied data, and...