7980 matches found
CVE-2023-29367
Technical details for CVE-2023-29367 are not publicly provided in the connected documents you supplied. Monitor for updates.
CVE-2023-29367 iSCSI Target WMI Provider Remote Code Execution Vulnerability
...
Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer
A novel multi-stage loader called DoubleFinger has been observed delivering a cryptocurrency stealer dubbed GreetingGhoul in what's an advanced attack targeting users in Europe, the U.S., and Latin America. "DoubleFinger is deployed on the target machine, when the victim opens a malicious PIF...
iSCSI Target WMI Provider Remote Code Execution Vulnerability
...
Cross-site Scripting (XSS)
github.com/rancher/rancher is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the Projects/Namespaces and Auth Provider sections, which allows an attacker with write access to inject and execute malicious code and steal sensitive information, manipulate web content, or perform...
KB5027230: Windows 10 LTS 1507 Security Update (June 2023)
The remote Windows host is missing security update 5027230. It is, therefore, affected by multiple vulnerabilities - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability CVE-2023-29363, CVE-2023-32014, CVE-2023-32015 - Microsoft ODBC Driver Remote Code Execution Vulnerabili...
Microsoft iSCSI Target WMI Provider 安全漏洞
Microsoft iSCSI Target WMI Provider is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft iSCSI Target WMI Provider. An attacker can exploit this vulnerability to remotely execute code. The following products and editions are affected:Windows Server 2022...
Microsoft OLE DB Provider for SQL Server 安全漏洞
Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...
Improper Authentication
Overview doorkeeper is an OAuth 2 provider for Rails and Grape. Affected versions of this package are vulnerable to Improper Authentication due to automatically processing authorization requests without user consent for public clients that have been previously approved. Public clients are...
CVE-2023-34246 Doorkeeper Improper Authentication vulnerability
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot...
CVE-2023-34246
CVE-2023-34246 affects ruby-doorkeeper, an OAuth 2 provider for Ruby on Rails and Grape. Prior to Doorkeeper 5.6.6, the gem could automatically process authorization requests for public clients that had been previously approved, enabling potential impersonation of public clients due to identity n...
CVE-2023-34581
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...
CVE-2023-34581
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...
Sql injection
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...
Service Provider Management System SQL注入漏洞
Service Provider Management System is a web-based application developed by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A security vulnerability exists in Service Provider Management System v1.0, which was discovered to contain...
CVE-2023-34581
The CVE-2023-34581 issue affects Sourcecodester Service Provider Management System v1.0 and is triggered by an SQL Injection in the parameter id of the endpoint "/php-spms/?page=services/view&id=2". Public sources describe an exploitable vulnerability with high impact (NVD CVSS v3.1 base score 9....
CVE-2023-34581
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...
CVE-2023-34581
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...
