MAL-2023-527 Malicious code in ing-orange-lu-luxtrust-oaw-mobile-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47e898a8d28683ffbebd031a0d10c1a1d610661c8b876689bdc85931ceda9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

eshop.orange.be Cross Site Scripting vulnerability OBB-3268089

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

orange-solar.de Cross Site Scripting vulnerability OBB-3265658

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-22630

IzyBat Orange casiers before 202211021 allows SQL Injection via a getCasier.php?taille= URI...

Sql injection

IzyBat Orange casiers before 202211021 allows SQL Injection via a getCasier.php?taille= URI...

CVE-2023-22630

IzyBat Orange casiers before 202211021 allows SQL Injection via a getCasier.php?taille= URI...

IzyBat Orange casiers SQL注入漏洞

IzyBat Orange casiers is a website. A security vulnerability exists in versions prior to IzyBat Orange casiers 202211021. An attacker exploited the vulnerability to perform a SQL injection attack...

CVE-2023-22630

IzyBat Orange casiers before 202211021 allows SQL Injection via a getCasier.php?taille= URI...

PT-2023-18598 · Unknown · Izybat Orange Casiers

Name of the Vulnerable Software and Affected Versions: IzyBat Orange casiers versions before 20221102 1 Description: The issue allows SQL Injection via a "getCasier.php?taille=" URI. Recommendations: For versions before 20221102 1, update to a version 20221102 1 or later to resolve the issue. As ...

CVE-2023-22630

CVE-2023-22630 affects IzyBat Orange casiers prior to 20221102_1. The issue is a SQL Injection vulnerability exposed through the getCasier.php?taille= URI, enabling an attacker to affect confidentiality (low) and potentially other impacts per CVSS. No explicit exploitation details are provided in...

Nanjing Thing Orange Information Technology Co., Ltd. home recipe book APP has information leakage vulnerability

Home-Cooked Recipe Book APP is a food recipe software. Nanjing Thing Orange Information Technology Co., Ltd. has an information leakage vulnerability in Home Recipe Book APP, which can be exploited by attackers to obtain sensitive information...

Malicious Package

Overview ing-orange-lu-luxtrust is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

MAL-2022-3834 Malicious code in ing-orange-corporatekey-password-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 722024f8bcb8ef22b7b81fd8d5d0f293a16e83de1e9cfd31c42177967515b6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

Sql injection

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-36161

CVE-2022-36161 affects Orange Station 1.0, with a SQL injection vulnerability exploitable via the username parameter. Root cause: improper handling of user input in the login/authentication flow leading to SQL injection. Potential impact: unauthorized access and data disclosure if exploited (as d...

PT-2022-23239 · Unknown · Orange Station

Name of the Vulnerable Software and Affected Versions: Orange Station version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter. Recommendations: For Orange Station version 1.0, update to a version that includes ...