13 matches found
CVE-2022-27434
UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...
EUVD-2019-17209
Malware in sbrugna...
EUVD-2022-31937
Malicious code in bioql PyPI...
NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-42977)
The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that stems from an incorrect manipulation of the parameter BandWidthProfile.ProfileName. An attacker could use this vulnerability to steal the victim's cookie-based...
CVE-2022-27434
UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...
CVE-2022-27434
UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...
Sql injection
UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...
CVE-2022-27434
UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...
CVE-2022-27434
UNIT4 TETA Mobile Edition (ME) prior to 29.5.HF17 contains a SQL injection in the errorReporting page via the ProfileName parameter. Affected product: UNIT4 TETA Mobile Edition (ME). Root cause: improper handling of the ProfileName input enabling SQL injection. Impact per CVSS: high confidentiali...
UNIT4 TETA Mobile SQL注入漏洞
UNIT4 TETA Mobile is a web-based application from UNIT4. It can be used on desktop and mobile devices, including smartphones and tablets. A security vulnerability exists in UNIT4 TETA Mobile versions prior to 29.5.HF17 that stems from the ProfileName parameter in the bug report page containing an...
CVE-2019-7677
The CVE-2019-7677 entry describes an XSS vulnerability in Enphase Envoy R3.. , exploitable via the profileName parameter on the /home URI served over TCP port 8888. The issue is a client-side or input handling flaw that can allow injection of script/HTML, potentially affecting users accessing the...
Multiple Cross-Site Scripting Vulnerabilities in Smoothwall Express
Smoothwall Express is a set of routing and firewall software for Linux-based systems. The software provides routing, firewall, NAT, VPN, IDS, dynamic DNS, internal and external network access control, network traffic control and monitoring, as well as logging and other functions. Smoothwall Expre...
DelphiTurk FTP 1.0 - Passwords to Local Users Exploit
No description provided by source. / DelphiTurk FTP v1.0 Local Exploit by Kozan Application: DelphiTurk FTP v1.0 Procuder: Delphiturk.com and Delphikitabi.com Vulnerable Description: DelphiTurk FTP v1.0 passwords to local users. Coded by: Kozan Web : www.netmagister.com Web2: www.spyinstructors.c...