3796 matches found
CVE-2022-29185 Observable Timing Discrepancy in totp-rs
totp-rs is a Rust library that permits the creation of 2FA authentification tokens per time-based one-time password TOTP. Prior to version 1.1.0, token comparison was not constant time, and could theorically be used to guess value of an TOTP token, and thus reuse it in the same time window. The...
totp-rs 安全漏洞
totp-rs is a tool for creating 2FA authentication tokens. A security vulnerability exists in versions of totp-rs prior to 1.1.0 that stems from the creation of 2FA authentication tokens for each time-based one-time password TOTP...
GHSA-VJXX-54VW-Q59F Moodle SSRF Vulnerability
The editblog.php script allows a registered user to add external RSS feed resources. It was identified that this feature could be abused to be used as a SSRF attack vector by adding a malicious URL/TCP PORT in order to target internal network or an internet hosted server, bypassing firewall rules...
Moodle SSRF Vulnerability
The editblog.php script allows a registered user to add external RSS feed resources. It was identified that this feature could be abused to be used as a SSRF attack vector by adding a malicious URL/TCP PORT in order to target internal network or an internet hosted server, bypassing firewall rules...
School Dormitory Management System 1.0 SQL Injection
Exploit Title: School Dormitory Management System - 'month' SQL Injection Date: 08/05/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15319/school-dormitory-management-system-phpoop-free-source-code.html Version:...
ChatBot Application With A Suggestion Feature 1.0 SQL Injection
Exploit Title: ChatBot Application with a Suggestion Feature 1.0 - 'id' Blind SQL Injection Date: 05/05/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15316/chatbot-app-suggestion-phpoop-free-source-code.html...
CVE-2021-25266
An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile Android before version 9.7.3495...
Sophos Authenticator 安全漏洞
Sophos Authenticator is a simple and intuitive application from Sophos UK. It is used to provide multiple authentication on mobile devices. Sophos Authenticator suffers from a security vulnerability that stems from insecure data storage. A physical attacker with root privileges could exploit this...
formalms SQL Injection Vulnerability
formalms a learning management system. Used to build around the specific needs of corporate training. formalms versions prior to v.1.4.3 contain a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker could exploit this...
ResearchGate Automatic Question Paper Generator System SQL Injection Vulnerability
ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...
CVE-2022-27104
An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...
CVE-2022-27104
An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...
Sql injection
An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...
CVE-2022-27104: Improper Neutralization of Special Elements used in an SQL Command
An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...
FormaLms SQL注入漏洞
formalms a learning management system. Used to build around the specific needs of corporate training. formalms versions prior to v.1.4.3 contain a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker could exploit this...
PT-2022-18222
Name of the Vulnerable Software and Affected Versions Forma LMS versions prior to 1.4.3 Description An Unauthenticated time-based blind SQL injection issue exists. This allows for potential exploitation without authentication. Recommendations For versions prior to 1.4.3, update to version 1.4.3 o...
CVE-2022-26631
Automatic Question Paper Generator v1.0 contains a Time-Based Blind SQL injection vulnerability via the id GET parameter...
CVE-2022-26631
Automatic Question Paper Generator v1.0 contains a Time-Based Blind SQL injection vulnerability via the id GET parameter...
