PT-2023-20372 · Sourcecodester · Sourcecodester Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A critical issue was found in the Registration component, where the manipulation of the username argument leads to SQL injection. This can be exploited remotely...

Food Ordering Management System SQL注入漏洞

Food Ordering Management System is a food ordering management system by Carlo Montero personal developer. It provides an online platform to order food from a restaurant or fast food chain. A SQL injection vulnerability exists in SourceCodester Food Ordering Management System version 1.0, which...

Join Our Webinar: Learn How to Defeat Ransomware with Identity-Focused Protection

Are you concerned about ransomware attacks? You're not alone. In recent years, these attacks have become increasingly common and can cause significant damage to organizations of all sizes. But there's good news - with the right security measures in place, such as real-time MFA and service account...

The vulnerability of TP-Link T2600G-28SQ switch’s microprogramming software, related to errors in managing registration data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of TP-Link T2600G-28SQ switch’s microprogramming software is related to errors in managing registration data when processing SSH keys. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2022-45860

The CVE-2022-45860 entry describes a weak authentication vulnerability in FortiNAC-F v7.2.0 and FortiNAC versions 9.4.2 and below, 9.2 and earlier, 9.1 and earlier, 8.8 and earlier, 8.7 and earlier, located in the device registration page. The underlying issue allows an unauthenticated attacker t...

CVE-2022-45860

A weak authentication vulnerability CWE-1390 in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in device registration page may allow an unauthenticated attacker to perform password spraying attacks with an increas...

CVE-2023-1383

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with Fire...

CVE-2023-1383

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with Fire...

PT-2023-14786 · Fortinet · Fortinac-F +1

Name of the Vulnerable Software and Affected Versions: FortiNAC-F version 7.2.0 FortiNAC versions 9.4.2 and below FortiNAC version 9.2 and earlier FortiNAC version 9.1 and earlier FortiNAC version 8.8 and earlier FortiNAC version 8.7 and earlier Description: A weak authentication issue in the...

PT-2023-2762 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the fixed buffer registration code for io uring io sqe buffer register in io uring/rsrc.c in the Linux kernel that allows out-of-bounds access to physical memory...

FortiNAC - Weak authentication mechanism on device registration page

A weak authentication vulnerability CWE-1390 in FortiNAC device registration page may allow an unauthenticated attacker to perform password spraying attacks with an increased chance of success...

The vulnerability of the SLP implementation lies in the insufficient control over the amount of network messages transmitted. This allows a malicious actor, operating remotely, to cause a service failure by registering arbitrary services to create fake UDP traffic.

The vulnerability of the SLP location determination protocol is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability allows a malicious actor to cause service failures by registering arbitrary services to create fake UDP traffic...

Fortinet FortiNAC 授权问题漏洞

Fortinet FortiNAC is a set of network access control solutions from the U.S. company Fita Fortinet. The product is primarily used for network access control and IoT security. A security vulnerability exists in Fortinet FortiNAC that stems from a weak authentication vulnerability in the device...

PT-2025-54058

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc7-next-20230418-00549-g1e096a17625a Description The Linux kernel contains an issue in the ath11k driver related to the registration of 6Ghz-only PHYs. A 6Ghz-only PHY, where the Basic Data Format BDF does...

PT-2023-19098 · Sourcecodester · Resort Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Resort Reservation System version 1.0 Description: A problematic issue was found in the system, affecting an unknown function of the file registration.php. The manipulation of the fullname argument leads to cross-site scripting...

The vulnerability of the Windows Error Reporting error reporting service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting registration service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the web interface of the microprogramming software for the Distribution Power Unit (PDU) Aten PE8108, which allows a hacker to gain access to the account data via Telnet and SNMP.

The vulnerability of the web interface of the microprogramming software for the Distribution Processing Unit PDU Aten PE8108 is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the registration data...

Weak Password policy on account registration

Description It was observed that application allows to create account with Blank spaces as password Proof of Concept 1. Go to https://meta.answer.dev/users/register 2. Create account with 10 blank spaces as password Result: Application allows to create user account with blank spaces as password...

CVE-2023-29552

The Service Location Protocol SLP, RFC 2608 allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor...

Service Location Protocol 安全漏洞

Service Location Protocol SLP is a protocol used to discover, configure, and manage network services. A security vulnerability exists in Service Location Protocol that stems from allowing an unauthenticated, remote attacker to register for arbitrary services, which could allow an attacker to use...