PT-2023-31545 · Unknown · Izybat Orange Casiers

Name of the Vulnerable Software and Affected Versions: IzyBat Orange casiers before 20230803 1 Description: The issue allows SQL injection in the getEnsemble.php ensemble. Recommendations: For IzyBat Orange casiers before 20230803 1, update to a version 20230803 1 or later to resolve the issue. A...

CVE-2023-50429

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

orange-sabou.com Improper Access Control vulnerability OBB-3806537

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Apache Superset - Elevation of Privilege

Overview An attacker with access to the SQL Lab and the abuser and abuserrole tables can elevate his privileges to become administrator. Details On a more general level, diverse tables who are supposed to be only readable can be modified using the WITH … AS and RETURNING keywords. Modification of...

Jorani Remote Code Execution Exploit

This Metasploit module exploits an unauthenticated remote code execution vulnerability in Jorani versions prior to 1.0.2. It abuses log poisoning and redirection bypass via header spoofing and then it uses path traversal to trigger the vulnerability. It has been tested on Jorani 1.0.0. This modul...

INTERPOL Nabs Hacking Crew OPERA1ER's Leader Behind $11 Million Cybercrime

A suspected senior member of a French-speaking hacking crew known as OPERA1ER has been arrested as part of an international law enforcement operation codenamed Nervone, Interpol has announced. "The group is believed to have stolen an estimated USD 11 million -- potentially as much as 30 million -...

Malicious code in react-orange-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d1f91905a22633d21b8801128e83148b0f22c92c6b63bfb66fb3a7981734d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-527 Malicious code in ing-orange-lu-luxtrust-oaw-mobile-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47e898a8d28683ffbebd031a0d10c1a1d610661c8b876689bdc85931ceda9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

eshop.orange.be Cross Site Scripting vulnerability OBB-3268089

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

orange-solar.de Cross Site Scripting vulnerability OBB-3265658

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-22630

IzyBat Orange casiers before 202211021 allows SQL Injection via a getCasier.php?taille= URI...

Sql injection

IzyBat Orange casiers before 202211021 allows SQL Injection via a getCasier.php?taille= URI...

CVE-2023-22630

IzyBat Orange casiers before 202211021 allows SQL Injection via a getCasier.php?taille= URI...

PT-2023-18598 · Unknown · Izybat Orange Casiers

Name of the Vulnerable Software and Affected Versions: IzyBat Orange casiers versions before 20221102 1 Description: The issue allows SQL Injection via a "getCasier.php?taille=" URI. Recommendations: For versions before 20221102 1, update to a version 20221102 1 or later to resolve the issue. As ...

CVE-2023-22630

IzyBat Orange casiers before 202211021 allows SQL Injection via a getCasier.php?taille= URI...

IzyBat Orange casiers SQL注入漏洞

IzyBat Orange casiers is a website. A security vulnerability exists in versions prior to IzyBat Orange casiers 202211021. An attacker exploited the vulnerability to perform a SQL injection attack...

CVE-2023-22630

CVE-2023-22630 affects IzyBat Orange casiers prior to 20221102_1. The issue is a SQL Injection vulnerability exposed through the getCasier.php?taille= URI, enabling an attacker to affect confidentiality (low) and potentially other impacts per CVSS. No explicit exploitation details are provided in...

Nanjing Thing Orange Information Technology Co., Ltd. home recipe book APP has information leakage vulnerability

Home-Cooked Recipe Book APP is a food recipe software. Nanjing Thing Orange Information Technology Co., Ltd. has an information leakage vulnerability in Home Recipe Book APP, which can be exploited by attackers to obtain sensitive information...

Malicious Package

Overview ing-orange-lu-luxtrust is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

MAL-2022-3834 Malicious code in ing-orange-corporatekey-password-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 722024f8bcb8ef22b7b81fd8d5d0f293a16e83de1e9cfd31c42177967515b6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...