7202 matches found
CVE-2024-1821
Affected product: code-projects Crime Reporting System 1.0. Vulnerability: SQL injection in processing of police_add.php caused by manipulating parameters police_name, police_id, police_spec, or password. Root cause (as described): improper handling/concatenation of user-supplied input leading to...
CVE-2024-1821 code-projects Crime Reporting System police_add.php sql injection
A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file policeadd.php. The manipulation of the argument policename/policeid/policespec/password leads to sql injection. The exploit has been disclos...
CVE-2024-1820
CVE-2024-1820 affects code-projects Crime Reporting System 1.0, specifically inchargelogin.php. The vulnerability arises from unsafely handling the email and password parameters, enabling SQL injection. It is exploitable remotely and an exploit has been disclosed publicly. Multiple sources (NVD, ...
essaion-theatre.com Cross Site Scripting vulnerability OBB-3857049
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Advice for manufacturers on the coming PSTI regulation
TL;DR PSTI: The UK Product Security and Telecommunications Infrastructure Product Security Act Regulations effective from 29 April 2024 Assess how, where, why, and when you may be affected Review supply chain and in-house teams for compliance readiness Specific obligations for manufacturers,...
Crime Reporting System SQL Injection Vulnerability
Crime Reporting System is an online crime reporting system by the individual developer Tedmar Enoria. A SQL injection vulnerability exists in Crime Reporting System version 1.0, which stems from the fact that incorrect manipulation of the parameters policename/policeid/policespec/password can lea...
Crime Reporting System SQL Injection Vulnerability
Crime Reporting System is an online crime reporting system by the individual developer Tedmar Enoria. A SQL injection vulnerability exists in Crime Reporting System version 1.0, which stems from an incorrect manipulation of the parameters email/password that can lead to an SQL injection...
CVE-2024-25381
creationtimestamp| type| source ---|---|--- 2024-02-21 20:26:18+00:00| seen| https://t.me/ctinow/190035 2024-02-21 20:31:41+00:00| seen| https://t.me/ctinow/190044 2024-02-22 20:33:06+00:00| seen| https://t.me/arpsyndicate/4036 2024-03-13 10:41:14+00:00| seen| https://t.me/ctinow/206541...
spanalaska.com Cross Site Scripting vulnerability OBB-3855880
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM SDK, Java Technology Edition Quarterly CPU - Jan 2024 - Includes Oracle January 2024 CPU is vulnerable to CVE-2023-33850
Summary This bulletin covers all applicable Java SE CVEs published by Oracle as part of their January 2024 Critical Patch Update, plus CVE-2023-33850. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack: Jazz Foundation, IBM Jazz Reporting Service, IBM...
pictree.in Cross Site Scripting vulnerability OBB-3855533
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
nilione.com Cross Site Scripting vulnerability OBB-3854689
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
certificationsprep.com Cross Site Scripting vulnerability OBB-3854573
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
facade.com Cross Site Scripting vulnerability OBB-3854139
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ji.la Improper Access Control vulnerability OBB-3853893
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ginesavanza.com Cross Site Scripting vulnerability OBB-3853687
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
vtekusa.com Cross Site Scripting vulnerability OBB-3853244
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-23805
Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables...
Default configuration
Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables...
CVE-2024-23805 F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability
Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables...