CVE-2023-38965

Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save URI...

Design/Logic Flaw

In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter in conjunction with the id parameter in a updjxcode=true action to the ndxzstudio/?a=system URI...

dotnet: Domain-spoofing attack in System.Uri

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'...

BWS Systems HA-Bridge Device Information Disclosure Vulnerability

BWS Systems HA-Bridge devices are a product for automating the connection and control of IoT devices. A security vulnerability exists in the BWS Systems HA-Bridge devices. A remote attacker could exploit this vulnerability by sending a direct request to the ! /system URI to obtain sensitive...