CVE-2022-27434

CVE-2022-27434 UNIT4 TETA Mobile Edition 29HF13 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page. The vulnerability exist in the error page generated by the application in this case: while changing password. Adding quotation mark to...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

EUVD-2019-17209

Malware in sbrugna...

EUVD-2022-31937

Malicious code in bioql PyPI...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-42977)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that stems from an incorrect manipulation of the parameter BandWidthProfile.ProfileName. An attacker could use this vulnerability to steal the victim's cookie-based...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

Sql injection

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition (ME) prior to 29.5.HF17 contains a SQL injection in the errorReporting page via the ProfileName parameter. Affected product: UNIT4 TETA Mobile Edition (ME). Root cause: improper handling of the ProfileName input enabling SQL injection. Impact per CVSS: high confidentiali...

UNIT4 TETA Mobile SQL注入漏洞

UNIT4 TETA Mobile is a web-based application from UNIT4. It can be used on desktop and mobile devices, including smartphones and tablets. A security vulnerability exists in UNIT4 TETA Mobile versions prior to 29.5.HF17 that stems from the ProfileName parameter in the bug report page containing an...

PT-2022-18425

Name of the Vulnerable Software and Affected Versions UNIT4 TETA Mobile Edition ME versions prior to 29.5.HF17 Description The issue is related to a SQL injection vulnerability. It can be exploited via the ProfileName parameter in the "errorReporting" page. Recommendations For versions prior to...

CVE-2022-27434: Improper Neutralization of Special Elements used in an SQL Command

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2019-7677

The CVE-2019-7677 entry describes an XSS vulnerability in Enphase Envoy R3.. , exploitable via the profileName parameter on the /home URI served over TCP port 8888. The issue is a client-side or input handling flaw that can allow injection of script/HTML, potentially affecting users accessing the...

PT-2019-18700

Name of the Vulnerable Software and Affected Versions Enphase Envoy versions R3.. Description A security issue exists due to the presence of a cross-site scripting XSS flaw. This issue can be triggered via the profileName parameter to the "/home" URI on TCP port 8888. Recommendations For Enphase...

CVE-2019-7677: Improper Neutralization of Input During Web Page Generation

XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888...

Multiple Cross-Site Scripting Vulnerabilities in Smoothwall Express

Smoothwall Express is a set of routing and firewall software for Linux-based systems. The software provides routing, firewall, NAT, VPN, IDS, dynamic DNS, internal and external network access control, network traffic control and monitoring, as well as logging and other functions. Smoothwall Expre...

CVE-2014-9429: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to inject arbitrary web script or HTML via the 1 PROFILENAME parameter in a Save action to httpd/cgi-bin/pppsetup.cgi or 2 COMMENT parameter in an Add action to httpd/cgi-bin/ddns.cgi...

PT-2014-9006

Name of the Vulnerable Software and Affected Versions Smoothwall Express versions 3.0 SP3 through 3.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PROFILENAME parameter in a Save action to "httpd/cgi-bin/pppsetup.cgi" or the...

DelphiTurk FTP 1.0 - Passwords to Local Users Exploit

No description provided by source. / DelphiTurk FTP v1.0 Local Exploit by Kozan Application: DelphiTurk FTP v1.0 Procuder: Delphiturk.com and Delphikitabi.com Vulnerable Description: DelphiTurk FTP v1.0 passwords to local users. Coded by: Kozan Web : www.netmagister.com Web2: www.spyinstructors.c...