Sql Injection

org.postgresql, postgresql is vulnerable to Sql Injection. The vulnerability is caused due to not escaping user provided literal parameter values in SQL query when using configuration option PreferQueryMode=SIMPLE. An attacker can exploit this vulnerability to inject SQL to alter the query by...

PT-2024-15565 · WordPress · The Royal Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons and Templates plugin for WordPress versions up to, and including, 1.3.87 Description: The issue is related to Stored Cross-Site Scripting via element URL parameters due to insufficient input sanitization and output...

PT-2024-6085

Name of the Vulnerable Software and Affected Versions Botan versions prior to 2.19.4 and 3.3.0 Description The issue is related to the parsing of X.509 certificates with explicit encoding of elliptic curve parameters. An attacker can present a certificate with very large parameters, causing...

GHSA-6VJF-48FH-VXXJ Improper Handling of Parameters in moodle

The URL parameters accepted by forum search were not limited to the allowed parameters...

Improper Handling of Parameters in moodle

The URL parameters accepted by forum search were not limited to the allowed parameters...

CVE-2024-25979

The URL parameters accepted by forum search were not limited to the allowed parameters...

UBUNTU-CVE-2024-25979

The URL parameters accepted by forum search were not limited to the allowed parameters...

CVE-2024-25979

The URL parameters accepted by forum search were not limited to the allowed parameters...

Code injection

The URL parameters accepted by forum search were not limited to the allowed parameters...

CVE-2024-25979

CVE-2024-25979 affects Moodle where the vulnerability stems from improper handling of URL parameters in the forum search feature, allowing parameters beyond those intended to be accepted. The root cause is unsecured/insufficient validation of user-supplied URL query parameters, which can lead to ...

CVE-2024-25979 Msa-24-0002: forum search accepted random parameters in its url

The URL parameters accepted by forum search were not limited to the allowed parameters...

CVE-2024-25979 Msa-24-0002: forum search accepted random parameters in its url

The URL parameters accepted by forum search were not limited to the allowed parameters...

CVE-2024-25979 Msa-24-0002: forum search accepted random parameters in its url

The URL parameters accepted by forum search were not limited to the allowed parameters...

Moodle Security Breach

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from a search accepting URL parameters that are not limited to those allowed...

Design/Logic Flaw

The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being download...

CVE-2024-26261 Hgiga OAKlouds - Arbitrary File Read And Delete

The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being download...

HGiga OAKlouds Operating System Command Injection Vulnerability

Hgiga Oaklouds is an enterprise collaborative work portal network of China Henderson Technology Hgiga Company. It is used for just-in-time communication and resource reservation. An operating system command injection vulnerability exists in HGiga OAKlouds. A remote attacker could exploit this...

INPRAX iZZi Trust Management Issues Vulnerabilities

INPRAX iZZi is an application from INPRAX Corporation. A security vulnerability exists in versions prior to INPRAX iZZi 2024010401 that stems from the inclusion of hard-coded queue credentials that could allow unauthorized access to manage and read recovery unit parameters...

CVE-2024-1471

An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters, which could lead to HTML redirection attacks...

CVE-2024-1471

An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters, which could lead to HTML redirection attacks...