CVE-2022-3581

CVE-2022-3581 affects SourceCodester Cashier Queuing System 1.0, specifically the Cashiers Tab’s Name parameter. The vulnerability is a cross-site scripting (XSS) flaw enabled by manipulating this argument, with remote exploitation reported. Several sources (NVD/Red Hat/PRION/CNNVD/CVE records) c...

CVE-2022-3579

The CVE concerns SourceCodester Cashier Queuing System 1.0, specifically the Login Page component at /queuing/login.php. The vulnerability arises from manipulation of the username/password parameters, enabling SQL injection. It is described as remote and publicly disclosed, with the VDB-211186 id...

PT-2022-22961 · Sourcecodester · Sourcecodester Cashier Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Cashier Queuing System version 1.0 Description: A critical issue was found in the Login Page component, specifically in the /queuing/login.php file. The manipulation of the username and password arguments leads to SQL injection...

PT-2022-14978 · Oracle · Oracle Database Server +1

Name of the Vulnerable Software and Affected Versions: Oracle Database Server version 19c Description: The issue affects the Oracle Database - Advanced Queuing component, allowing a high-privileged attacker with DBA user privilege and network access via Oracle Net to compromise it. Successful...

CVE-2022-3581 SourceCodester Cashier Queuing System Cashiers Tab cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the component Cashiers Tab. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2022-21596

CVE-2022-21596 affects Oracle Database Server, specifically the Advanced Queuing component in Oracle Database 19c. The vulnerability allows a high-privilege attacker with DBA privileges and network access via Oracle Net to compromise Advanced Queuing, potentially leading to takeover of the compon...

Cashier Queuing System security vulnerabilities

Cashier Queuing System is a cashier queuing system by Carlo Montero Personal Developer. A security vulnerability exists in Cashier Queuing System version 1.0, which stems from unknown code in the file /queuing/login.php is affected, and manipulation of the parameter username/password can lead to...

CVE-2022-21596: Undefined Security Weakness

Vulnerability in the Oracle Database - Advanced Queuing component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable vulnerability allows high privileged attacker having DBA user privilege with network access via Oracle Net to compromise Oracle Database -...

MQTT Cross-Site Scripting Vulnerability

MQTT Message Queuing Telemetry Transport is an ISO standard ISO/IEC PRF 20922 based on the Publish/Subscribe paradigm of messaging protocols, which works on the TCP/IP family of protocols, and is designed for remote devices with low hardware performance and poor network conditions. It works on th...

Six Ways to Have Your eCommerce Site Ready for High-Traffic eShopping Days

The spikes are coming September is nearly over, and Black Friday, Cyber Monday, Thanksgiving, Hanukkah, Halloween, Super Saturday, and the festive season will soon be upon us. With the holidays comes increased sales opportunities, driven by increased traffic. When you’re ready for the spikes, you...

PT-2022-33831

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description The issue concerns a fix for wrong queuing behavior in the gsm dlci data output function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-34093

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.2 through 5.10.136 Description The issue is related to wrong queuing behavior in the gsm dlci data output function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-33477 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.2 through 5.19.1 Description: The issue is related to wrong queuing behavior in the gsm dlci data output function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

Ubuntu: Security Advisory (USN-5443-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-32449

TOTOLINK EX300V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet...

GSD-2022-1002674 bfq: Make sure bfqg for which we are queueing requests is online

bfq: Make sure bfqg for which we are queueing requests is online This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31820

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to the bfq functionality, specifically ensuring that bfqg for which requests are being queued is online. The actual impact and attack plausibility have not yet been...

USN-5443-2 linux-gcp-5.13, linux-oracle, linux-oracle-5.13 vulnerabilities

Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or execute arbitrary code...

USN-5442-2: Linux kernel vulnerabilities

Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or execute arbitrary code...

USN-5444-1 linux-oem-5.14, linux-oem-5.17 vulnerability

Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or execute arbitrary code...