Lucene search
+L

1053 matches found

Code423n4
Code423n4
added 2022/05/01 12:0 a.m.8 views

Possible to steal collateral during a reentrant collateral transfer

Lines of code Vulnerability details Impact In NFTPair.sol218 an ERC-721 transfer occurs. Anyone who gains execution during this transfer after the owner of the token is changed can steal the token transferred. Note that it will be applicable only if !skim. Since the exploit makes assumptions abou...

7.1AI score
SaveExploits0
NVD
NVD
added 2022/04/21 8:15 p.m.25 views

CVE-2022-28012

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...

8.8CVSS0.01095EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/21 8:15 p.m.11 views

CVE-2022-28012

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...

8.8CVSS5.8AI score0.01095EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/21 8:15 p.m.4 views

CVE-2022-28012

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...

8.8CVSS7.2AI score0.01095EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/04/21 8:15 p.m.4 views

CVE-2022-28020

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positionedit.php...

8.8CVSS7.2AI score0.01095EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/21 8:15 p.m.6 views

CVE-2022-28020

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positionedit.php...

8.8CVSS7.3AI score0.01095EPSS
SaveExploits1References1
Prion
Prion
added 2022/04/21 8:15 p.m.19 views

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positionedit.php...

6.5CVSS8.9AI score0.01095EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/04/21 7:5 p.m.74 views

CVE-2022-28012

CVE-2022-28012 affects Attendance and Payroll System v1.0 (PHP/MySQLi). The vulnerability is a SQL injection in the component admin\position_delete.php caused by lack of input validation, allowing attackers to execute arbitrary SQL and potentially access/steal sensitive data. No exploitation deta...

8.8CVSS8.9AI score0.01095EPSS
SaveExploits1References1Affected Software1
GithubExploit
GithubExploit
added 2022/04/14 1:42 p.m.22 views

Exploit for Cross-site Scripting in Jqueryui Jquery_Ui

Exploit-Medium-CVE-2021-41184 Exploit Medium CVE-2021-41184 X...

6.5CVSS9.4AI score0.40768EPSS
SaveExploits2
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.26 views

Omron CX-One CX-Position NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS5.7AI score0.01985EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.30 views

Omron CX-One CX-Position NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS5.7AI score0.01985EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.29 views

Omron CX-One CX-Position NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS5.7AI score0.01985EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.33 views

Omron CX-One CX-Position NCI File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS5.4AI score0.0138EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.28 views

Omron CX-One CX-Position NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS5.7AI score0.01985EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.34 views

Omron CX-One CX-Position NCI File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS4.4AI score0.01409EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/01 11:15 p.m.43 views

CVE-2022-26022

Omron CX-Position versions 2.5.3 and prior is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code...

7.8CVSS0.01409EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/01 11:15 p.m.10 views

CVE-2022-25959

Omron CX-Position versions 2.5.3 and prior is vulnerable to memory corruption while processing a specific project file, which may allow an attacker to execute arbitrary code...

7.8CVSS6AI score0.0138EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/01 11:15 p.m.10 views

CVE-2022-26419

Omron CX-Position versions 2.5.3 and prior is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code...

7.8CVSS7.7AI score0.01985EPSS
SaveExploits0References5
OSV
OSV
added 2022/04/01 11:15 p.m.10 views

CVE-2022-26417

Omron CX-Position versions 2.5.3 and prior is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arbitrary code...

7.8CVSS7.3AI score0.01409EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/01 11:15 p.m.35 views

CVE-2022-26419

Omron CX-Position versions 2.5.3 and prior is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code...

7.8CVSS0.01985EPSS
SaveExploits0References5
Rows per page
Query Builder