CVE-2022-31007

eLabFTW is an electronic lab notebook manager for research teams. Prior to version 4.3.0, a vulnerability allows an authenticated user with an administrator role in a team to assign itself system administrator privileges within the application, or create a new system administrator account. The...

EUVD-2022-45322

Malicious code in bioql PyPI...

CVE-2022-42246

Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account...

CVE-2022-2921

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update...

CVE-2022-42246

Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account...

Cross site request forgery (csrf)

Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account...

CVE-2022-42246

Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account...

CVE-2022-42246: Cross-Site Request Forgery (CSRF)

Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account...

Privilege escalation

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update...

CVE-2022-2921: Exposure of Private Personal Information to an Unauthorized Actor

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update...

Medical Store Management System 1.0 SQL Injection Vulnerability

Title: Medical Store Management System v1.0 remote SQL-Injections Author: nu11secur1ty Vendor: https://github.com/abhisheks008 Software: https://github.com/abhisheks008/Medical-Store-Management-System CVE-Medical Store Management System v1.0 Description: The cid parameter fom customer-add.php app...