1912 matches found
PT-2022-3141 · Microsoft · Windows Encrypting File System +1
Name of the Vulnerable Software and Affected Versions: Windows Encrypting File System EFS affected versions not specified Description: The issue is related to insufficient input validation in the Windows Encrypting File System EFS, which can be exploited by a remote attacker to execute arbitrary...
Simple Real Estate Portal System SQL注入漏洞（CNVD-2022-43406）
Simple Real Estate Portal System is a real estate portal system from Carlo Montero's personal developer. Simple Real Estate Portal System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleemployeeedit.php...
Sql injection
Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...
The vulnerability of the Cisco IOS XE operating system’s IPSec decryption process allows a attacker to trigger a device reboot or cause a service failure.
The vulnerability of the Cisco IOS XE operating system’s IPSec decryption process exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure using a specially crafted IPSec packet...
Student Grading System SQL注入漏洞
Student Grading System is a student grading system from Carlo Montero's personal developer. v1.0 of Student Grading System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
Microsoft Windows Upgrade Assistant Remote Code Execution Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows Upgrade Assistant. The vulnerability stems from improper handling of input data and can be exploited by an attacker to...
CVE-2022-24844 SQL Injection in github.com/flipped-aurora/gin-vue-admin
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. The problem occurs in the following code in server/service/system/sysautocodepgsql.go, which means that PostgreSQL must be used as the database for this vulnerability to occu...
CVE-2022-1248 SAP Information System POST Request add_admin.php improper authentication
A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAPInformationSystem/controllers/addadmin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploi...
Spoofer 1.4.6 Privilege Escalation / Unquoted Service Path
Exploit Title: Spoofer 1.4.6 – Local Privilege Escalation via Unquoted Service Path Date: 24/01/2022 Exploit Author: Asim Sattar @MAsim1 Vendor Homepage: https://www.caida.org/projects/spoofer/ Software Link: https://www.caida.org/projects/spoofer/downloads/Spoofer-1.4.6-win32.exe Version: 1.4.6...
CVE-2022-0998
An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhostvdpaconfigvalidate function. This flaw allows a local user to crash or potentially escalate their privileges on the system...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.
Vulnerability of the MySQL Cluster component: General database management system vulnerabilities in MySQL Cluster exist due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...
The vulnerability of the Oracle Solaris operating system’s file system allows a perpetrator to trigger a service failure.
The vulnerability of the Oracle Solaris operating system’s file system is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2021-22572
On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.createTempFile creates files in the the system temporary directory with world readable permissions. Any sensitive information written to theses files is visible to all other loc...
The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), related to reading data beyond the specified buffer, allows a intruder to trigger a service failure.
The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, is related to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...
Owners Collection Management System v1.0 SQL - Injection Vulnerability
Title: Owners Collection Management System v1.0 SQL - Injections Author: nu11secur1ty Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15162/home-owners-collection-management-system-phpoop-free-source-code.html Reference:...
CVE-2022-24232
A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
Northstar Club Management Operating System Command Injection Vulnerability
Northstar Club Management is a web-based solution from Northstar, Inc. that allows organizations to manage all elements of a club, such as memberships, guests, events, and more. An operating system command injection vulnerability exists in Northstar Club Management version 6.3, which stems from a...