CVE-2022-4496

The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin version 20.0.0 before 20.0.7 does not validate that the redirect parameter to its SSO login endpoint points to an...

PT-2023-14950 · Unknown · Online Student Enrollment System

Name of the Vulnerable Software and Affected Versions: Online Student Enrollment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the "/student enrollment/admin/login.php" API endpoint...

PT-2023-16116 · Sourcecodester · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A critical issue has been found in the Login Page component of the affected software. The issue is related to the manipulation of the Username argument in the...

PT-2022-27080 · Unknown · Simmeth Lieferantenmanager

Name of the Vulnerable Software and Affected Versions: Simmeth Lieferantenmanager versions prior to 5.6 Description: An issue was discovered due to errors in session management, allowing an attacker to log back into a victim's account after the victim logged out. The "/LMS/LM/main" endpoint can b...

PT-2022-27375 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A DOM-based cross-site scripting XSS issue was found in the /rukovoditel/index.php?module=users/login component. This allows attackers to cause a Denial of Service DoS by sending a crafted GET request...

PT-2022-27457 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.6.0 Description: A cross-site scripting XSS issue exists in the Url parameter of the "/login.php" API endpoint, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For EyouCMS...

Apache Airflow Input Validation Error Vulnerability (CNVD-2022-78860)

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. The platform features scalable and dynamic monitoring.Apache Airflow versions prior to 2.4.3 are vulnerable to an input validation error that stems from an open redirect in the...

PT-2022-26768 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the "/diagnostic/login.php" API endpoint. Recommendation...

PT-2022-26816 · Unknown · Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: A SQL injection issue was found in the Human Resource Management System. The vulnerability can be exploited via the password parameter at the "/hrm/controller/login.php" API endpoint...

CVE-2022-45402

In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's /login endpoint...

PYSEC-2022-42984

In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's /login endpoint...

PT-2022-27504 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.4.3 Description: The issue is related to an open redirect in the webserver's "/login" endpoint. This means that an attacker could potentially redirect users to a malicious website after they attempt to log i...

CVE-2022-45402

CVE-2022-45402 affects Apache Airflow versions prior to 2.4.3, which have an open redirect in the webserver’s /login endpoint. The root cause is an open redirect via the login parameter (e.g., next), enabling unvalidated redirects that could be used for phishing. The vulnerability is documented w...

Apache Airflow 输入验证错误漏洞

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. The platform features scalable and dynamic monitoring.Apache Airflow versions prior to 2.4.3 are vulnerable to an input validation error that stems from an open redirect in the...

PT-2022-14853 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: A vulnerability in the web management interface could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operatin...

CVE-2022-30694

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack...

CVE-2022-30694

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack...

PT-2022-24167 · Eolinker · Eolinker Apinto-Dashboard

Name of the Vulnerable Software and Affected Versions: eolinker apinto-dashboard affected versions not specified Description: A problematic issue affects the processing of the file /login, where the manipulation of the callback argument leads to an open redirect. This issue can be initiated...

A Recap of Released Features in Q3 for Imperva’s Online Fraud Prevention Solution

Advanced Bot Protection Earlier this year, Imperva was named a Leader in The Forrester Wave: Bot Management, Q2 2022. Advanced Bot Protection ABP ranked at the top in the current offering category, based on criteria including the range of supported use cases, bot detection, configuration and...

PT-2022-11401 · Unknown · Resumes Management/Job Application Website

Name of the Vulnerable Software and Affected Versions: Resumes Management and Job Application Website version 1.0 Description: A SQL Injection issue exists in the login form of the Resumes Management and Job Application Website application, allowing authentication bypass through the "login.php"...