5871 matches found
openPosition() use stale feeGrowthInside0LastX128/feeGrowthInside1LastX128
Lines of code Vulnerability details Vulnerability details When openPosition, we need to record the current feeGrowthInside0LastX128/feeGrowthInside1LastX128. And when closing the position, we use Base.getOwedFee to calculate the possible fees generated during the borrowing period, which are used ...
PT-2023-31257
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the lastname parameter at the "/customer support/ajax.php?action=save user" API endpoint...
PT-2023-31430
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the subject parameter at the "/customer support/ajax.php?action=save ticket" API endpoint...
NetworkSherlock - Powerful And Flexible Port Scanning Tool With Shodan
NetworkSherlock is a powerful and flexible port scanning tool designed for network security professionals and penetration testers. With its advanced capabilities, NetworkSherlock can efficiently scan IP ranges, CIDR blocks, and multiple targets. It stands out with its detailed banner grabbing...
DashMachine Code Injection Vulnerability
DashMachine is a web application bookmarking dashboard by Ross Mountjoy Individual Developer. A code injection vulnerability exists in DashMachine version 0.5-4, where the parameter valuetemplate in the source file /settings/saveconfig can lead to code injection...
PT-2023-32808 · Rmountjoy92 · Dashmachine
Name of the Vulnerable Software and Affected Versions: rmountjoy92 DashMachine versions 0.5-4 Description: A problematic issue was found in the Config Handler component, specifically in the /settings/save config file. The manipulation of the value template argument leads to code injection. The...
Exploit for SQL Injection in Customer_Support_System_Project Customer_Support_System
CVE-2023-50071 Customer Support System 1.0 - Multiple SQL in...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-50070 Customer Support System 1.0 - Multiple SQL in...
PT-2023-30397 · Unknown · Dokmee Ecm
Name of the Vulnerable Software and Affected Versions: Dokmee ECM version 7.4.6 Description: The issue allows remote code execution due to the response to a "GettingStarted/SaveSQLConnectionAsync //gettingstarted" request containing a connection string for privileged SQL Server database access...
PT-2023-32771 · Sourcecodester · Sourcecodester Simple Student Attendance System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A critical issue has been found in the save attendance function of the actions.class.php file. The manipulation of the sid argument leads to SQL injection...
curl security vulnerability
curl is a tool for transferring data from or to a server. A security vulnerability exists in curl versions 7.46.0 through 8.4.0, which stems from the fact that the save function appends a suffix to a filename and creates a temporary file, which may cause curl to delete all contents when the...
Network Configuration Manager SaveResultsToFile Code Execution
The vulnerability of the SaveResultsToFile method in the Network Configuration Manager NCM software lies in improper restrictions on the path name of the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...
GHSA-HV4C-V8J8-54CW Cross-Site Request Forgery in JFinalCMS via /admin/nav/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/save...
Cross-Site Request Forgery in JFinalCMS via /admin/tag/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/save...
GHSA-RQ2Q-HC6H-2PX2 Cross-Site Request Forgery in JFinalCMS via /admin/tag/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/save...
GHSA-882G-GJQP-9VJP Cross-Site Request Forgery in JFinalCMS via /admin/category/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/save...
Cross-Site Request Forgery in JFinalCMS via /admin/nav/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/save...
Cross-Site Request Forgery in JFinalCMS via /admin/category/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/save...
Cross-Site Request Forgery in JFinalCMS via /admin/form/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/form/save...