16001 matches found
SQL Injection in '/module/accounts/ajax.php'
Description There exists an SQL injection affecting the 'order'0'dir', start and length parameters located in the file /module/accounts/ajax.php Let's take a look at the following code: https://github.com/unilogies/bumsys/blob/9dc2de204116297a7e528c38bc3b1e89bf40f907/module/accounts/ajax.phpL1503...
XWiki Platform 代码注入漏洞
XWiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the French company XWiki. A security vulnerability exists in XWiki Platform that originates from an arbitrary script macro that can be injected via a URL request parameter in combination with other...
CVE-2023-25931
Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...
CVE-2023-25931 Medtronic Micro Clinician & InterStim X Clinician App Password Reset Issue
Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...
CVE-2023-25931
Medtronic Pelvic Health clinician apps (Micro Clinician A51200 and InterStim X Clinician A51300) installed on the Smart Programmer mobile device are affected by a password-related vulnerability (CVE-2023-25931) that could allow unauthorized control of the clinician therapy application. The issue ...
GHSA-32GR-4CQ6-5W5Q rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters
Impact When the URL parameters contain certain special characters, it returns an error page that does not properly handle XSS vulnerabilities, allowing for the execution of arbitrary JavaScript code. Users who access the deliberately constructed URL are affected. Patches This vulnerability was...
rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters
Impact When the URL parameters contain certain special characters, it returns an error page that does not properly handle XSS vulnerabilities, allowing for the execution of arbitrary JavaScript code. Users who access the deliberately constructed URL are affected. Patches This vulnerability was...
SUSE-SU-2023:0586-1 Security update for nrpe
This update for nrpe fixes the following issues: - CVE-2015-4000: Fixed Logjam Attack by increasing the standard size of 512 bit dh parameters to 2048 bsc931600, bsc938906...
Fortinet FortiWeb Formatting String Error Vulnerability
Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. A formatted string error vulnerability exist...
ASB-A-264598465
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
Open redirect
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
kernel: stack overflow in do_proc_dointvec and proc_skip_spaces
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
PT-2023-21054 · Opencats · Opencats
Name of the Vulnerable Software and Affected Versions: OpenCATS affected versions not specified Description: The issue is related to an open redirect vulnerability that exposes OpenCATS to template injection. This occurs due to improper validation of user-supplied GET parameters. Recommendations:...
CVE-2023-25231
Tenda Router W30E V1.0.1.25633 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...