3671 matches found
Sql injection
There are two full read/write Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp pag...
CVE-2022-26959
CVE-2022-26959 describes two full Blind/Time-based SQL injection vulnerabilities in Northstar Club Management v6.3. The flaws affect: (1) processlogin.jsp in /northstar/Portal/ via the userName parameter, and (2) login.jsp in /northstar/iphone/ via the userID parameter. Exploitation could grant f...
WordPress WP 2FA plugin <= 2.2.1 - Time-Based Side-Channel Attack vulnerability
Time-Based Side-Channel Attack vulnerability discovered by Calvin Alkan in WordPress WP 2FA plugin versions = 2.2.1. Solution Update the WordPress WP 2FA plugin to the latest available version at least 2.3.0...
CVE-2022-37144
The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthenticated remote attacker in possession of a valid username and password can bruteforce their way past MFA protections to login as the targeted user...
Online Market Place Site 1.0 SQL Injection Exploit
Online Market Place Site version 1.0 suffers from an unauthenticated blind SQL injection vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection. Exploit Title: Online Market Place Site v1.0 - Unauthenticated Blind Time-Based SQL Injection Exploit Author: Joe...
Online Market Place Site SQL注入漏洞
Online Market Place Site is an online marketplace site by Carlo Montero Personal Developer. Online Market Place Site version 1.0 suffers from a SQL injection vulnerability that stems from an unauthenticated blind SQL injection vulnerability that allows remote attackers to dump a SQL database via...
Online Market Place Site 1.0 SQL Injection
Exploit Title: Online Market Place Site v1.0 - Unauthenticated Blind Time-Based SQL Injection Exploit Author: Joe Pollock Date: September 03, 2022 Vendor Homepage: https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html Software Link:...
SFTPGo 授权问题漏洞
SFTPGo is a full-featured and highly configurable SFTP server by Nicola Murino, a personal developer in Italy. An authorization issue vulnerability exists in SFTPGo versions 2.2.0 through 2.3.3, which stems from the fact that TOTP is typically configured on mobile devices that may be lost, stolen...
Personnel Property Equipment 2015-2022 SQL Injection
Title: Personnel Property Equipment-2015-2022 SQLi, Unauthenticated-File-Upload Author: nu11secur1ty Date: 08.22.2022 Vendor Homepage: https://www.trickcode.in/ Video vendor: https://www.youtube.com/watch?v=ltSwom8sQAQ Software...
edenusa.com Cross Site Scripting vulnerability OBB-2855027
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CISA and FBI issue alert about Zeppelin ransomware
The Federal Bureau of Investigation FBI and the Cybersecurity and Infrastructure Security Agency CISA have released a joint Cybersecurity Advisory CSA about Zeppelin ransomware. The advisory contains indicators of compromise IOCs and tactics, techniques, and procedures TTPs associated with...
Exploit for SQL Injection in Glpi-Project Glpi
CVE-2022-31061 PoC for GLPI CVE-2022-31061 A Proof of Concept...
CVE-2022-34955
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...
CVE-2022-34955
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...
CVE-2022-34956
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddataforgroups.php...
Sql injection
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...
Sql injection
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddataforgroups.php...
CVE-2022-34956
Pligg CMS v2.0.2 is affected by a time-based SQL injection via the page_size parameter in load_data_for_groups.php (CVE-2022-34956). The vulnerability allows an attacker to manipulate SQL queries, with the NVD listing a 9.8 (CRITICAL) base score across confidentiality, integrity, and availability...
