1767 matches found
Oracle XML DB SID Discovery Via Brute Force
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle XML DB SID Discovery via Brute Force', 'Description' = %q This module attempts to retrieve the sid from the Oracle XML DB httpd server,...
CVE-2024-42567
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...
CVE-2024-42567
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...
School-Management-System 安全漏洞
School-Management-System is a school management system by the individual developer Jyothi Babu Araja. School-Management-System has a security vulnerability that stems from an SQL injection vulnerability in the sid parameter of the /search.php?action=2 page...
PT-2024-30027 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System version bae5aa Description: A SQL injection issue was discovered in the School Management System, allowing unauthorized data access and manipulation via the sid parameter at the "/search.php?action=2" endpoint. This...
CVE-2024-42567
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...
CVE-2024-42567
CVE-2024-42567 is a SQL injection vulnerability in the School Management System identified on commit bae5aa, exploitable via the sid parameter at /search.php?action=2. The issue affects the system with network-based access, no authentication/UI interaction required, and has a CVSS v3.1 base score...
CVE-2024-42812
In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...
D-Link DIR-860L 安全漏洞
The AUO DIR-860L is a wireless router from China's AUO that supports the Wi-Fi 5 standard and offers dual-band 2.4GHz and 5GHz network connectivity with a maximum transmission speed of up to 1200 Mbps.The device has a built-in antenna and comes with one USB 3.0 port and four Gigabit wired ports. ...
EUVD-2024-39804
In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...
PT-2024-6506 · D Link · D-Link Dir-860L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L version 2.03 Description: The issue is related to a buffer overflow vulnerability in the gena.cgi file of the D-Link DIR-860L router's firmware. This vulnerability is caused by the lack of length verification for the SID field...
CVE-2023-50381
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...
htmlLawed 1.2.5 - Remote Code Execution (RCE)
Exploit Title: htmlLawed 1.2.5 - Remote Code Execution RCE Date: 2024-04-24 Exploit Author: Miguel Redondo aka d4t4s3c Vendor Homepage: https://www.bioinformatics.org/phplabware/internalutilities/htmLawed Software Link: https://github.com/kesar/HTMLawed Version: -c \n" exit else banner echo -e "\...
SUSE SLES15: frr / frr-devel / libfrr0 / libfrr_pb0 / libfrrcares0 / etc (SUSE-SU-2024:1453-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1453-1 advisory. - CVE-2024-27913: Fixed a denial of service issue via a malformed OSPF LSA packet bsc1220548. - CVE-2024-31948: Fixed...
Malicious code in sid-client-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 271bfa6075e1282de1c0d5269d79377fe6b16e9d60fa41a2a6a070cb97795905 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1292 Malicious code in sid-client-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 271bfa6075e1282de1c0d5269d79377fe6b16e9d60fa41a2a6a070cb97795905 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Denial Of Service (DoS)
FRRouting/frr is vulnerable to Denial of Service DoS. This vulnerability occurs due to improper handling of the Prefix SID attribute in the bgpattrmalformed function within bgpattr.c, leading to a crash of the bgpd daemon...
Session Hijacking
org.keycloak:keycloak-services is vulnerable to Session Hijacking. This vulnerability is due to an issue where an active Keycloak session can be hijacked by initiating a new authentication using the query parameter prompt=login, prompting the user to enter their credentials again. If the user...
