CVE-2023-30014

SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via subeventid parameter in subeventstatupdate.php...

Judging Management System security breach

Judging Management System is a judging management system by Carlo Montero Personal Developer. A security vulnerability exists in Sourcecodester Judging Management System v1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary code and obtain sensiti...

Judging Management System security breach

Judging Management System is a judging management system by Carlo Montero Personal Developer. A security vulnerability exists in Sourcecodester Judging Management System v1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary code and obtain sensiti...

CVE-2023-30014

SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via subeventid parameter in subeventstatupdate.php...

PT-2024-12224 · Unknown · Oretnom23 Judging Management System

Name of the Vulnerable Software and Affected Versions: oretnom23 Judging Management System version 1.0 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the sub event id parameter in the "sub event details edit.php" endpoint...

PT-2024-12222 · Unknown · Oretnom23 Judging Management System

Name of the Vulnerable Software and Affected Versions: oretnom23 Judging Management System version 1.0 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the sub event id parameter in the "sub event stat update.php" endpoint...

TotalCloud Insights: Crafting Effective Indicators of Compromise (IoCs) for Sub-domain Takeover Risk Detection

Subdomain takeover poses a significant security threat in cloud environments. It occurs when a subdomain of a domain e.g., subdomain.example.com inadvertently resolves to an external service no longer under the organizations control. These orphaned subdomains provide attackers with a foothold for...

sub-version-production.de Improper Access Control vulnerability OBB-3820393

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fedora 39 : vim (2023-3fbd936b15)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3fbd936b15 advisory. The newest upstream commit Security fixes for CVE-2023-48706, CVE-2023-46246 Tenable has extracted the preceding description block directly from the...

The vulnerability of the sub_4119A0 function in the microprogramming software of the TOTOLINK X6000R router allows a hacker to execute arbitrary code.

The vulnerability of the sub4119A0 function shttpd in the TOTOLINK X6000R router microprogramming system exists due to the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2023-28587

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level...

Memory corruption

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level...

mariadb: segmentation fault via the component sub_select

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...

TOTOLINK X6000R Security Breach

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X6000R version V9.4.0cu.852B20230719, which originates from the sub417338 function of the shttpd file that obtains fields from the front-end, connects them via the snprintf...

PT-2023-7529

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R version V9.4.0cu.852 B20230719 Description The issue is related to errors in the code of the TOTOLINK X6000R router's firmware, specifically in the sub 417338 function. This function obtains fields from the front-end, connects...

PT-2023-30964

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R Firmware version V9.4.0cu.852 B20230719 Description The issue arises from the shttpd file's sub 415534 function, which obtains fields from the front-end, connects them through the snprintf function, and passes them to the...

CVE-2023-48805

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability...

PT-2023-7636 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.852 B20230719 Description: The issue arises from the sub 4119A0 function in the shttpd file, which obtains fields from the front-end through the Uci Set The Str function. When these fields are passed to the...

PT-2023-7630

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R version V9.4.0cu.852 B20230719 Description The issue exists due to the lack of neutralization of special elements used in the operating system command. This can allow a remote attacker to execute arbitrary commands. The sub...

PT-2023-7438 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.852 B20230719 Description: The issue is related to the sub 4119A0 function in the shttpd file, which obtains fields from the front-end through the Uci Set The Str function. When these fields are passed to the...