11 matches found
CVE-2024-51073
An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt CAN communication between the instrument cluster and CAN bus. NOTE: this is disputed by the Supplier because the findings came from a potentially unrealistic test environment a...
CVE-2024-51073
The CVE concerns the Kia Seltos instrument cluster (software/hardware v1.0) where an issue could allow an attacker to control or disrupt CAN bus communication between the instrument cluster and CAN bus. The supplier disputes the findings, citing a potentially unrealistic test environment (isolate...
CVE-2024-51073
An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt CAN communication between the instrument cluster and CAN bus. NOTE: this is disputed by the Supplier because the findings came from a potentially unrealistic test environment a...
CVE-2024-51072
The CVE-2024-51072 entry concerns Kia Seltos instrument cluster software and hardware v1.0 and reports a potential Denial of Service via the ECU Reset UDS service. The reports consistently attribute the issue to the ECU reset functionality, but note that the supplier disputes the findings, citing...
BDTASK G-Prescription Gynaecology & OBS Consultation Software Cross-Site Scripting Vulnerability
BDTASK G-Prescription Gynaecology & OBS Consultation Software is a prescription gynecology and OBS consultation software from BDTASK Bangladesh. A cross-site scripting vulnerability exists in BDTASK G-Prescription Gynaecology & OBS Consultation Software version 1.0, which originates in the OBS...
Petrol Pump Management Software v1.0 - Remote Code Execution via File Upload
Exploit Title: Petrol Pump Management Software v1.0 - Remote Code Execution via File Upload Date: 01-03-2024 Exploit Author: Shubham Pandey Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17180/petrol-pump-management-software-free-download.html...
CVE-2023-49665
Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'quantity' parameter of the submitdeliverylist.php resource does not validate the characters received and they are sent unfiltered to the database...
Sql injection
Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bankdetails' parameter of the partysubmit.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-49665 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'quantity' parameter of the submitdeliverylist.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-49625 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partylisteditsubmit.php resource does not validate the characters received and they are sent unfiltered to the database...
Free Simple Software v1.0 Remote File Inclusion Vulnerability
Exploit for php platform in category web applications ============================================================= Free Simple Software v1.0 Remote File Inclusion Vulnerability ============================================================= Free Simple Software V1.0 By : Dr.$audi SauDi ViRuS TeaM ...