CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

PT-2023-21280 · Dualspace · Dualspace Lock Master

Name of the Vulnerable Software and Affected Versions: DUALSPACE Lock Master version 2.2.4 Description: An issue in DUALSPACE Lock Master allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: inser...

PT-2023-17602 · Unknown · Campcodes Online Traffic Offense Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Traffic Offense Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /classes/Master.php. The manipulation of the id argument leads to sql injection. The attack may be...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

Campcodes Online Traffic Offense Management System SQL注入漏洞

Campcodes Online Traffic Offense Management System is a web-based traffic offense management system. A SQL injection vulnerability exists in Campcodes Online Traffic Offense Management System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the paramet...

CVE-2023-27647

CVE-2023-27647 affects DUALSPACE Lock Master v2.2.4. The issue allows a local attacker to cause a denial of service or leak sensitive information via com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of android.net.Uri.insert. Root cause is the insertion pathway in SharedPrefP...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

DUALSPACE Lock Master 安全漏洞

DUALSPACE Lock Master is a smart and secure Android app lock from DUALSPACE. A security vulnerability exists in DUALSPACE Lock Master version 2.2.4, which stems from the presence of a denial of service and disclosure of sensitive information...

CVE-2023-1985

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. This issue affects the function savebrand of the file /classes/Master.php?f=savebrand. The manipulation of the argument name leads to sql injection. The attack may be initiate...

CVE-2023-28489

A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05, CP-8050 MASTER MODULE All versions CPCI85 V05. Affected devices are vulnerable to command injection via the web server port 443/tcp, if the parameter “Remote Operation” is enabled. The parameter is disabled by...

CVE-2023-28489

CVE-2023-28489 affects Siemens SICAM A8000 devices with CP-8031/CP-8050 Master Modules (all versions prior to CPCI85 V05). The issue is an improper neutralization of special elements that enables command injection via the web server (port 443/tcp) when the parameter “Remote Operation” is enabled ...

CVE-2023-26773

Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the product list function in the Master.php file...

The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, due to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2023-20788 · Unknown · Sales Tracker Management System

Name of the Vulnerable Software and Affected Versions: Sales Tracker Management System version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to gain privileges via the product list function in the Master.php file. This can be exploited to potentially gain unauthorized...

Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure

The plugin leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files. PoC - Create a password protected package containing one or more files. - Navigate to the download page of the package e.g. /download/package1 -...

The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, due to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted requests...

Online Computer and Laptop Store 路径遍历漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. A path traversal vulnerability exists in Online Computer and Laptop Store v1.0. The vulnerability stems from the fact that the parameter path in the file /classes/Master.php?f=deleteim...

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter category of...

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the fi...

PT-2023-17370 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the Subcategory Handler component, specifically in the file /classes/Master.php?f=save sub category. The manipulation of the sub...