CVE-2024-28322

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the eventid parameter in a crafted POST request...

CVE-2024-31502

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/newstaff...

CVE-2024-28322: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the eventid parameter in a crafted POST request...

CVE-2024-31502: Improper Privilege Management

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/newstaff...

CVE-2024-28322

A SQL Injection vulnerability exists in PuneethReddyHC Event Management version 1.0 within the /event-management-master/backend/register.php API endpoint. The root cause is the improper neutralization of special elements used in an SQL command via the event_id parameter. Attackers can exploit thi...

CVE-2024-22633: Improper Control of Generation of Code

Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request...

CVE-2024-22633

Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request...

CVE-2024-31502

The Insurance Management System (v.1.0.0 and earlier) contains a privilege escalation vulnerability. A remote attacker can exploit a permissions issue in the /admin/core/new_staff file by sending a crafted POST request . This could allow unauthorized users to gain elevated privileges within the s...

CVE-2024-22632: Improper Control of Generation of Code

Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hmsg parameter. This vulnerability is triggered via a crafted POST request...

CVE-2024-22632

Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hmsg parameter. This vulnerability is triggered via a crafted POST request...

Quarkus: security checks in resteasy reactive may trigger a denial of service

A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security checks for some JAX-RS endpoints being performed after serialization, more processing resources are consumed while the HTTP request is checked. In certain configurations, if an attacker has knowledge of any...

Tenda AC8 Router fromAdvSetMacMtuWan Heap Buffer Overflow

The vulnerability of the fromAdvSetMacMtuWan function /goform/AdvSetMacMtuWan of the Tenda AC8 router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information b...

moziloCMS security vulnerabilities

moziloCMS is an open source content management system CMS. It is primarily aimed at users with little knowledge of HTML and is impressive for its beginner-friendly operation. A security vulnerability exists in version v2.0 of moziloCMS, which stems from a vulnerability that allows an attacker to...

PT-2024-22868 · Mozilocms · Mozilocms

Name of the Vulnerable Software and Affected Versions: moziloCMS version 2.0 Description: The issue allows attackers to bypass file upload restrictions, potentially leading to unauthorized file execution or storage of malicious content. This is achieved by renaming files, which can result in the...

CVE-2024-29368

The moziloCMS v2.0 content management system contains an arbitrary file upload vulnerability within its file handling module. Attackers can bypass extension restrictions by utilizing file renaming techniques, which can lead to the storage of malicious content or the execution of arbitrary code vi...

Tenda W30E fromDhcpListClient Buffer Overflow

The vulnerability of the fromDhcpListClient function in the Tenda W30E router software relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

Tenda AC500 Router Command Execution

The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC500 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...

Tenda AC500 fromDhcpListClient Code Execution

The vulnerability of the fromDhcpListClient function /goform/DhcpListClient in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...

Tenda AC500 Router Code Execution

The vulnerability of function R7WebsSecurityHandler /goform/execCommand in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...

SUSE-SU-2024:1345-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2024-24549: Fixed denial of service during header validation for HTTP/2 stream bsc1221386 - CVE-2024-23672: Fixed denial of service due to malicious WebSocket client keeping connection open bsc1221385 Other fixes: - Update to Tomcat 9.0.87...