CVE-2024-51520

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51520

CVE-2024-51520 corresponds to a vulnerability in Huawei HarmonyOS where the HDC module does not verify inbound input parameters. Affected component: HDC module within HarmonyOS. Root cause: lack of verification of input parameters, leading to potential availability impact. Impact: CVSS indicates ...

CVE-2024-51519

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51519

CVE-2024-51519 describes a vulnerability in Huawei HarmonyOS where the HDC module does not properly verify input parameters. Reported impact is potential denial of service affecting availability. Public details are limited; affected versions and a fix are not specified in the provided documents. ...

CVE-2024-51519

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

LocalAI Cross-site Scripting vulnerability

localai =2.20.1 is vulnerable to Cross Site Scripting XSS. When calling the delete model API and passing inappropriate parameters, it can cause a one-time storage XSS, which will trigger the payload when a user accesses the homepage...

PHPGurukul Hospital Management System 安全漏洞

Hospital Management System a PHP and MySQL based hospital management system. Hospital Management System has a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameters fromdate and todate in the...

PT-2024-8369 · NetGear · Netgear R8500

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue is related to multiple stack overflow vulnerabilities in the ipv6 fix.cgi component of the Netgear R8500 router. These vulnerabilities are caused by the lack of size checking for input da...

CVE-2024-38407

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-48057

CVE-2024-48057 affects LocalAI (version

Codezips Pet Shop Management System 安全漏洞

Codezips Pet Shop Management System is an open source pet store management system from Codezips. A security vulnerability exists in Codezips Pet Shop Management System version 1.0, which is caused by a SQL injection in the parameter id or name...

PT-2024-25075 · Lplh · Lplh

Name of the Vulnerable Software and Affected Versions: LPLH affected versions not specified Description: The issue occurs due to memory corruption while parsing IPC frequency table parameters for LPLH when the size is greater than the expected size. This results in memory issues. Recommendations:...

CVE-2024-48057

localai =2.20.1 is vulnerable to Cross Site Scripting XSS. When calling the delete model API and passing inappropriate parameters, it can cause a one-time storage XSS, which will trigger the payload when a user accesses the homepage...

RHEL 5 / 6 : JBoss Enterprise Web Platform 5.2.0 (RHSA-2013:0874)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0874 advisory. The Enterprise Web Platform is a slimmed down profile of the JBoss Enterprise Application Platform intended for mid-size workloads with light and...

CVE-2024-10700

A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...

PT-2024-16475 · Unknown · Code-Projects University Event Management System

Name of the Vulnerable Software and Affected Versions: code-projects University Event Management System version 1.0 Description: A critical issue has been found in the code-projects University Event Management System, affecting the file submit.php. The manipulation of the arguments name, email,...

In the Dark about Shadow APIs?

I’m often asked about shadow APIs and shadow API parameters—even by people with a lot of experience in the API development space...

CVE-2024-31975

EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters. JavaScript embedded into a vulnerable field is executed when the user clicks the SSID field's corresponding EDIT button...

CVE-2024-8444

The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting...

CVE-2024-8444

CVE-2024-8444 concerns the WordPress Download Manager plugin prior to version 3.3.00. The vulnerability arises because certain shortcode parameters aren’t properly sanitized, enabling a cross-site scripting (XSS) issue. Affected product: Download Manager WordPress plugin (versions