Sql injection

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /novel/userFeedback/list...

Sql injection

jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutMaterialCount function of jshERP does not filter column and order parameters well enough, and an attacker can construct malicious payload to bypass jshERP's...

Sql injection

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /common/dict/list...

CVE-2024-25558

The CVE-2024-25558 entry is associated with Google ChromeOS: the PowerVR GPU driver contains an integer overflow in DevmemIntChangeSparse() that enables controllable out-of-bounds writes. This could lead to memory corruption or elevation of privileges, as described in ChromeOS security notes tied...

CVE-2024-25556

ChromeOS update note confirms CVE-2024-25556 is an in-system, publicly acknowledged issue: an out-of-bounds write in the PhysmemCreateNewDmaBufBackedPMR path. Affected product family: ChromeOS/ChromeOS Flex. The security fix is included in the Stable channel update for OS version 15699.58.0 and B...

CVE-2024-1281

CVE-2024-1281 is tied to a ChromeOS/ChromeOS Flex issue: a buffer/Out-of-Bounds write in the cam_lrme_mgr_hw_prepare_update function in Chrome OS. The PT security entry for Google Chrome OS (PT-2023-8539) describes a related buffer overflow in the same component, noting privilege-escalation impac...

CVE-2024-1280

CVE-2024-1280 is an out-of-bounds/write issue in the CAMX driver of ChromeOS, leading to privilege escalation/arbitrary code execution. The ChromeOS update notes list CVE-2024-1280 as a Medium severity fix in the CAMX driver and indicate the patch is included in the OS/browser updates (OS version...

Sql injection

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /novel/bookContent/list...

Unrestricted file upload

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

CVE-2024-22394

CVE-2024-22394 affects SonicWall SonicOS SSL-VPN on firmware version 7.1.1-7040. The issue is an improper authentication vulnerability that could allow a remote attacker to bypass authentication under specific conditions. Affected component: SonicOS SSL-VPN feature. Root cause: deficiencies in au...

CVE-2023-48974

Axigen WebMail is affected by a Cross-Site Scripting vulnerability (CVE-2023-48974) in versions prior to 10.3.3.61. The issue allows a remote attacker to escalate privileges by injecting a crafted script via the serverName_input parameter. Public exploit activity exists (e.g., Exploit-DB) and mai...

CVE-2024-24003

CVE-2024-24003 affects jshERP v3.3. The vulnerability is a SQL injection in com.jsh.erp.controller.DepotHeadController.findInOutMaterialCount() caused by insufficient filtering of the column and order parameters in safeSqlParse. Exploitation details are not provided in the supplied sources; no ac...

CVE-2024-25191

CVE-2024-25191 affects the PHP-JWT library (version 1.0.0). The vulnerability arises because authentication verification uses strcmp, which is not constant-time, enabling bypass of authentication via a timing side channel. Documented impact is high: network access with no privileges required, and...

CVE-2024-24495

CVE-2024-24495 is a SQL injection vulnerability affecting Daily Habit Tracker version 1.0, arising from the delete-tracker.php endpoint. Remote attackers can craft a GET request to trigger arbitrary code execution due to insecure handling of input in the targeted PHP file. The Red Hat advisory co...

CVE-2024-24014

CVE-2024-24014 affects Novel-Plus v4.3.0-RC1 and earlier. The vulnerability is a SQL injection in the /novel/author/list endpoint triggered by crafted offset, limit, and sort parameters. Documented impact is high (confidentiality, integrity, and availability all affected) with CVSS v3.1 base scor...

CVE-2024-24021

Summary: CVE-2024-24021 is a SQL injection vulnerability in Novel-Plus up to version 4.3.0-RC1, exploitable via the /novel/userFeedback/list endpoint by passing crafted offset, limit, and sort parameters. The CVSS v3.1 vector indicates a critical impact (Network attack, no privileges, no user int...

CVE-2024-24018

Summary of CVE-2024-24018 (Novel-Plus) : A SQL injection vulnerability affects Novel-Plus versions 4.3.0-RC1 and earlier, exploitable via the API endpoint /system/dataPerm/list by passing crafted values for the offsets/limits/sort parameters. The CVSS 3.1 score is 9.8 (CRITICAL) with network acce...

CVE-2024-24350

CVE-2024-24350 corresponds to a file upload vulnerability in Software Publico e-Sic Livre, affecting version 2.0 and earlier. The issue arises from the extension filtering component, enabling a remote attacker to upload crafted payloads that may lead to arbitrary code execution. The NVD/Red Hat a...

CVE-2024-24494

Daily Habit Tracker v1.0 is affected by a stored Cross-Site Scripting (XSS) vulnerability in add-tracker.php and update-tracker.php. The issue arises from multiple input parameters (day, exercise, pray, read_book, vitamins, laundry, alcohol, meat) that can be exploited to execute arbitrary script...

CVE-2024-24213

CVE-2024-24213 affects Supabase PostgreSQL v15.1 via the /pg_meta/default/query component. The issue is described as a SQL injection vulnerability in that UI-involved query endpoint, with vendor guidance that it is an intended feature and that the vulnerability exists in the Supabase dashboard (n...