634 matches found
myersparkumc.org Improper Access Control vulnerability OBB-2252742
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
liverpoolshoppingpark.co.uk Improper Access Control vulnerability OBB-2229443
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
park-igls.at Cross Site Scripting vulnerability OBB-2159765
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 9 security fixes, including: 1234764 High CVE-2021-30598: Type Confusion in V8. Reported by Manfred Paul on 2021-07-30 1234770 High CVE-2021-30599: Type Confusion in V8. Reported by Manfred Paul on 2021-07-30 1231134 High CVE-2021-30600: Use after fr...
SourceCodester Theme Park Ticketing System SQL Injection Vulnerability
SourceCodester Theme Park Ticketing System is a software application. A simple PHP/MySQLi project that helps to manage and generate tickets for theme park or amusement park visitors. SourceCodester Theme Park Ticketing System suffers from a SQL injection vulnerability that stems from a lack of...
CVE-2021-25209
SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...
CVE-2021-25209
SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...
Sql injection
SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...
CVE-2021-25209
SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...
CVE-2021-25209
The CVE-2021-25209 entry corresponds to a SQL injection vulnerability in SourceCodester Theme Park Ticketing System v1.0. The flaw arises from insufficient validation of the id parameter in view_user.php, enabling remote attackers to execute arbitrary SQL statements. Affected software is the Them...
sourcecoester Theme Park Ticketing System SQL注入漏洞
SourceCodester Theme Park Ticketing System is a software application. A simple PHP/MySQLi project that helps to manage and generate tickets for theme park or amusement park visitors. SourceCodester Theme Park Ticketing System suffers from a SQL injection vulnerability that stems from a lack of...
SQL Injection Vulnerability in Intelligent Park Comprehensive Management Platform of Zhejiang Dahua Technology Co.(CNVD-2021-51488)
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a SQL injection vulnerability in the integrated management platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by an attacker to obtain sensitive...
SQL Injection Vulnerability in Intelligent Park Integrated Management Platform of Zhejiang Dahua Technology Co.
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a SQL injection vulnerability in the integrated management platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by an attacker to obtain sensitive...
SQL Injection Vulnerability in Intelligent Park Comprehensive Management Platform of Zhejiang Dahua Technology Co.(CNVD-2021-51489)
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a SQL injection vulnerability in the integrated management platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by an attacker to obtain sensitive...
SQL Injection Vulnerability in Theme Park Ticketing System
Theme Park Ticketing System is a system developed using PHP and MySQLi to help manage and generate tickets for visitors in a theme park or amusement park. The Theme Park Ticketing System suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive informatio...
Unauthorized Access Vulnerability in Intelligent Park Integrated Management Platform of Zhejiang Dahua Technology Co.
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An unauthorized access vulnerability exists in the intelligent park integrated management platform of Zhejiang Dahua Technology Co. An attacker can use this vulnerability to...
Weak Password Vulnerability in Intelligent Park Integrated Management Platform of Zhejiang Dahua Technology Co.
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in the intelligent park integrated management platform of Zhejiang Dahua Technology Co. An attacker can use this vulnerability to connect...
U.S. Charges 3 North Korean Hackers Over $1.3 Billion Cryptocurrency Heist
The U.S. Department of Justice DoJ on Wednesday indicted three suspected North Korean hackers for allegedly conspiring to steal and extort over $1.3 billion in cash and cryptocurrencies from financial institutions and businesses. The three defendants — Jon Chang Hyok, 31; Kim Il, 27; and Park Jin...
Park Ticketing Management System 1.0 - 'viewid' SQL Injection
Exploit Title: Park Ticketing Management System 1.0 - 'viewid' SQL Injection Google Dork: N/A Date: 29/1/2021 Exploit Author: Zeyad Azima Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/park-ticketing-management-system-using-php-and-mysql/ Version: V1 Tested on:...
WordPress Stripe Payments plugin <= 2.0.39 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Park Won Seok in WordPress Stripe Payments plugin versions = 2.0.39. Solution Update the WordPress Stripe Payments plugin to the latest available version at least 2.0.40...