10093 matches found
Improper Access Control
Postorius is vulnerable to Improper Access Control. The vulnerability is due to insufficient validation which allows any logged-in user to send a crafted POST request to unsubscribe any user from a mailing list as well as verify if the address was subscribed in the first place...
CVE-2024-22546: Improper Neutralization of Special Elements used in a Command
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the dosetNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request...
Tenda FH1206 fromAddressNat Function Heap Buffer Overflow DoS
The vulnerability of the fromAddressNat function in the ip/goform/addressNat format in the microprogrammed routing software Tenda FH1206 is related to buffer overflows in the stack during the processing of the page parameter. Exploiting this vulnerability can allow an attacker to cause service...
CVE-2024-22546
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the dosetNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request...
CVE-2024-22546
The TRENDnet TEW-815DAP (version 1.0.2.0) is vulnerable to Command Injection due to improper neutralization of special elements in the do_setNTP function. An authenticated attacker with administrator privileges can exploit this by sending a malicious POST request over the network. Practical conse...
Tenda FH1206 fromAddressNat Function Heap Buffer Overflow DoS
The vulnerability of the fromAddressNat function in the ip/goform/addressNat format in the microprogrammed software for Tenda FH1206 is related to buffer overflows in the stack during the processing of the mitInterface parameter. Exploiting this vulnerability can allow an attacker to cause servic...
CVE-2024-28320
Insecure Direct Object References IDOR vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php...
CVE-2024-28320
Insecure Direct Object References IDOR vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php...
CVE-2024-33449
An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter...
CVE-2024-33449
An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter...
CVE-2024-33449
An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter...
CVE-2024-28320
The Sourcecodester Hospital Management System version 1.0 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. Attackers can manipulate user parameters to gain unauthorized access and perform modifications by sending a crafted POST request to the /patient/edit-user.php endp...
CVE-2024-28320: Authorization Bypass Through User-Controlled Key
Insecure Direct Object References IDOR vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php...
PT-2024-3327
Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue affects the formWifiMacFilterSet function, where the manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This can be exploited remotely, potentially impacti...
CVE-2024-22633
Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request...
CVE-2024-22632
Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) version 388 is vulnerable to a remote code execution (RCE) vulnerability. The flaw is triggered by sending a crafted POST request that interacts with the hmsg parameter, leading to improper control of generation of code (CWE-94). Th...
CVE-2024-22633
The Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 software is susceptible to a remote code execution (RCE) vulnerability. The flaw is triggered by sending a crafted POST request to the hprinter parameter, leading to improper control of the generation of code (CWE-94 ). As a...
CVE-2024-22633
Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request...
CVE-2024-28322
SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the eventid parameter in a crafted POST request...