12021 matches found
Siemens Mendix Runtime Access Control Improper Vulnerability
Mendix is an application platform that enables mobile and web applications to be built and continuously improved at scale. a security vulnerability exists in Siemens Mendix Runtime that could be exploited by attackers to dump and manipulate sensitive data...
Updating the hub’s token contract address may lead to incorrect undelegation amount
Lines of code Vulnerability details Updating the hub’s token contract address may lead to incorrect undelegation amounts Impact The hub contract allows config updates to the tokencontract config values in anchor-bAsset-contracts/contracts/anchorbassethub/src/config.rs Such updates can cause wrong...
Simple Mobile Comparison Website SQL Injection Vulnerability
Simple Mobile Comparison Website is a mobile comparison website by Carlo Montero's personal developer. Simple Mobile Comparison Website is vulnerable to SQL injection and no details of the vulnerability are available...
TikTok: View thumbnail of any private video (friends or followers only) of Private/Public account
Vulnerability description not provided...
Bank Mellat <= 1.3.7 - Reflected Cross-Site Scripting
The plugin does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. https://example.com/wp-admin/admin.php?page=bank-mellat&orderId="...
GSD-2022-1000575 drm/nouveau: fix off by one in BIOS boundary checking
drm/nouveau: fix off by one in BIOS boundary checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...
[SECURITY] Fedora 35 Update: libxml2-2.9.13-1.fc35
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
Exploit for Forced Browsing in Ametys
CVE-2022-26159-Ametys-Autocompletion-XML A python exploi...
Cab Management System 1.0 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: Cab Management System 1.0 - Remote Code Execution RCE Authenticated Exploit Author: Alperen Ergel Contact: @alpernae IG/TW Software Homepage: https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html Version : 1.0 Tested on: windows 10 xammp | Kali...
Design/Logic Flaw
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result cou...
Hackers are using Microsoft Teams chat to spread malware
By Waqas So far, researchers have identified thousands of these attacks involving abuse of the Microsoft Teams chat feature. As… This is a post from HackRead.com Read the original post: Hackers are using Microsoft Teams chat to spread malware...
GHSA-38W8-H222-WRPP Improper Restriction of XML External Entity Reference in Jenkins Chef Sinatra
Chef Sinatra Plugin 1.20 and earlier does not perform a permission check in a method implementing form validation. As the plugin does not configure its XML parser to prevent XML external entity XXE attacks, attackers can have Jenkins parse a crafted XML response that uses external entities for...
Mitsubishi Electric MELSEC iQ-R Improper Access Control (CVE-2020-5656)
Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...
Wordpress 404 to 301 2.0.2 Plugin - SQL Injection (Authenticated) Exploit
Exploit Title: Wordpress Plugin 404 to 301 2.0.2 - SQL-Injection Authenticated Exploit Author: Ron Jost Hacker5preme Vendor Homepage: https://de.wordpress.org/plugins/404-to-301/ Software Link: https://downloads.wordpress.org/plugin/404-to-301.2.0.2.zip Version: = 2.0.2 Tested on: Ubuntu 20.04 CV...
WordPress RegistrationMagic V 5.0.1.5 SQL Injection
Exploit Title: WordPress Plugin RegistrationMagic V 5.0.1.5 - SQL Injection Authenticated Date 23.01.2022 Exploit Author: Ron Jost Hacker5preme Vendor Homepage: https://registrationmagic.com/ Software Link:...
Exploit for SQL Injection in Moodle
CVE-2022-0332 Moodle 3.11 to 3.11.4 - SQL injection...
