1291 matches found
CVE-2023-7183
CVE-2023-7183 affects 7-card Fakabao up to 1.0_build20230805. The vulnerability is a SQL injection in the file shop/alipay_notify.php caused by improper handling of the out_trade_no parameter (unknown function issue cited). Public exploit and disclosure have been noted. Impact is reported as high...
PT-2023-32928 · Unknown · 7-Card Fakabao
Name of the Vulnerable Software and Affected Versions: 7-card Fakabao versions up to 1.0 build20230805 Description: A critical issue has been found in the software, affecting an unknown functionality of the file shop/alipay notify.php. The manipulation of the out trade no argument leads to sql...
7-card Fakabao SQL Injection Vulnerability
7-card Fakabao is a 7-card open source application. A SQL injection vulnerability exists in 7-card Fakabao version 1.0build20230805 and earlier versions, which stems from a problem with an unknown function in shop/wxpaynotify.php...
PT-2023-32929 · Unknown · 7-Card Fakabao
Name of the Vulnerable Software and Affected Versions: 7-card Fakabao versions up to 1.0 build20230805 Description: A critical issue was found in the software, affecting some unknown functionality of the file shop/notify.php. The manipulation of the out trade no argument leads to sql injection. T...
7-card Fakabao SQL Injection Vulnerability
7-card Fakabao is a content publishing platform. A SQL injection vulnerability exists in 7-card Fakabao version 1.0build20230805 and prior versions, which stems from an issue with an unknown function in member/notify.php...
PT-2023-32930 · Unknown · 7-Card Fakabao
Name of the Vulnerable Software and Affected Versions: 7-card Fakabao version 1.0 build20230805 Description: A critical issue affects an unknown part of the file shop/wxpay notify.php. The manipulation of the argument out trade no leads to sql injection. The exploit has been disclosed to the publ...
7-card Fakabao SQL Injection Vulnerability
7-card Fakabao is a content publishing platform. A SQL injection vulnerability exists in 7-card Fakabao 1.0build20230805 and classified as critical version and prior versions, which stems from an issue with an unknown function in shop/notify.php...
PT-2023-32931 · Unknown · 7-Card Fakabao
Name of the Vulnerable Software and Affected Versions: 7-card Fakabao versions 1.0 build20230805 and earlier Description: A critical issue was found in the member/notify.php file, where the manipulation of the out trade no argument leads to SQL injection. The exploit has been disclosed to the...
7-card Fakabao SQL Injection Vulnerability
7-card Fakabao is a content publishing platform. A SQL injection vulnerability exists in 7-card Fakabao 1.0build20230805 and classified as critical version and prior versions, which stems from an issue with an unknown function in shop/alipaynotify.php...
zagalet.com Improper Access Control vulnerability OBB-3815856
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-8642 · Atlassian · Jira
Name of the Vulnerable Software and Affected Versions: S/Notify versions prior to 4.0.2 for Jira Description: An issue was discovered that allows the configuration settings of S/Notify to be modified via a CSRF attack while an administrative user is logged on. This could be initiated by the...
beamish-hall.co.uk Cross Site Scripting vulnerability OBB-3783903
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE CVE-2023-38710
An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 or 1, an error notify INVALIDSPI is sent back. The notify payload's protocol ID is copied from the incoming packet, but the code that verifies outgoing packets...
SUSE CVE-2023-38712
An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the deleted state...
libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart
A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the...
libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart
A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the...
openbiblio.de Improper Access Control vulnerability OBB-3772575
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-40130
In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege and background activity launch with no additional execution privileges needed. User interaction is not needed for exploitation...
