CVE-2023-41559

The CVE-2023-41559 entry describes a stack overflow in the Tenda AC7/AC9/AC5 firmware (AC7 V1.0 V15.03.06.44; AC9 V3.0 V15.03.06.42_multi; AC5 V1.0RTL_V15.03.06.28) triggered by a parameter in the page at /goform/NatStaticSetting. The root cause is a stack overflow in the affected page parameter ...

SourceCodester Resort Management System 跨站脚本漏洞

Sourcecodester Online Resort Management System is an open source web-based application that provides online room reservations and can also be used as a simple website for resorts. A cross-site scripting vulnerability exists in the SourceCodester Resort Management System version 1.0, which stems...

Lost and Found Information System 跨站脚本漏洞

Lost and Found Information System is a lost and found information system by oretnom23 individual developer. A cross-site scripting vulnerability exists in Lost and Found Information System version 1.0, which stems from cross-site scripting due to incorrect manipulation of the parameter page...

Simple Task Allocation System 安全漏洞

Simple Task Allocation System is a simple task allocation system by the individual developer Carlo Montero. A security vulnerability exists in version 1.0 of the SourceCodester Simple Task Allocation System, which stems from an information disclosure due to incorrect manipulation of the parameter...

Purchase Order Management System 跨站脚本漏洞

Purchase Order Management System is a purchase order management system developed by Carlo Montero. A security vulnerability exists in Purchase Order Management System version 1.0, which is a cross-site scripting vulnerability caused by manipulation of the parameter "page"...

CVE-2021-27208

When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...

CVE-2021-27208

When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...

Simple College Website 1.0 Local File Inclusion

Exploit Title: Simple College Website 1.0 - 'page' Local File Inclusion Date: 30-10-2020 Exploit Author: mosaaed Vendor Homepage: https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html Software Link:...

VuFind 1.0 Cross Site Scripting

VuFind 1.0 Web Application Reflected XSS Cross-site Scripting 0-Day Bug Security Issue Exploit Title: VuFind Results? &lookfor parameter Reflected XSS Web Security Vulnerability Product: VuFind Vendor: VuFind Vulnerable Versions: 1.0 Tested Version: 1.0 Advisory Publication: September 20, 2015...

[eVuln] Doika guestbook 'page' XSS Vulnerability

New eVuln Advisory: Doika guestbook 'page' XSS Vulnerability http://evuln.com/vulns/134/summary.html --------------------Summary---------------- eVuln ID: EV0134 CVE: CVE-2006-4325 Software: Doika guestbook Sowtware's Web Site: http://doika.net/ Versions: 2.5 Critical Level: Harmless Type:...

koobi-cms423.txt

SQL-injections in koobi-cms 4.2.3 The program: koobi-cms Homepage: http://www.dream4.de/ Vulnerable Versions: 4.2.3 Has found: CENSORED SVT 28.04.05 The description --------------- Vulnerability has been found in parameter page. In koobi-cms it Refers to - p. Data transferred to this parameter no...