11782 matches found
PT-2023-5602 · D Link · D-Link Dar-8000
Name of the Vulnerable Software and Affected Versions: D-Link DAR-8000 versions up to 20151231 Description: The issue is related to an unrestricted file upload vulnerability in the /sysmanage/changelogo.php file of the D-Link DAR-8000 router's firmware. This vulnerability can be exploited remotel...
CVE-2023-41374
Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier because the issue exists in parsing of...
D-Link Di-7200G Buffer Error Vulnerability
The D-Link Di-7200G is a Gigabit enterprise router from China-based D-Link. A security vulnerability exists in the D-Link Di-7200G, which can be caused by manipulating the hiup parameter in the qosext.asp function to cause a stack overflow...
PT-2023-31486 · Lmxcms · Lmxcms
Name of the Vulnerable Software and Affected Versions: lmxcms versions up to 1.41 Description: A critical issue affects some unknown functionality of the file admin.php. The manipulation of the lid argument leads to SQL injection. The vendor was contacted about this disclosure but did not respond...
Metasploit Weekly Wrap-Up
Flask Cookies This week includes two modules related to Flask cookie signatures. One is specific to Apache Superset where session cookies can be resigned, allowing an attacker to elevate their privileges and dump the database connection strings. While adding this functionality, community member...
Brave Android 1.58.125 Security Fixes
Fixed Brave Wallet pop-up hiding the full screen toast as reported on HackerOne by shadow2639. Upgraded Chromium to 117.0.5938.62 — refer to Google Chrome advisories for inherited CVEs...
PT-2023-27042 · Unknown · Leotheme Leoblog
Name of the Vulnerable Software and Affected Versions: LeoTheme leoblog versions up to 3.1.2 Description: The issue is related to a SQL injection vulnerability. It affects the component LeoBlogBlog::getListBlogs. There is no information provided about the estimated number of potentially affected...
com.full.dialer.top.secure.crypted security vulnerability
com.full.dialer.top.secure.crypted is a library by actuator personal developer. A security vulnerability exists in com.full.dialer.top.secure.crypted 1.0.1 and earlier versions, which stems from allowing any installed application to make a phone call by sending a crafted intent...
CVE-2023-37875
Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...
CVE-2022-4896
Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows with the messages "PNTMEDIDAS", "PEDIR", "HAYDISCOA" or "SPOOLER". A complete denial of service can be achieved by sending multiple requests simultaneously on a core...
Design/Logic Flaw
Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows with the messages "PNTMEDIDAS", "PEDIR", "HAYDISCOA" or "SPOOLER". A complete denial of service can be achieved by sending multiple requests simultaneously on a core...
up-media.nl Cross Site Scripting vulnerability OBB-3673746
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-4896
Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows with the messages "PNTMEDIDAS", "PEDIR", "HAYDISCOA" or "SPOOLER". A complete denial of service can be achieved by sending multiple requests simultaneously on a core...
CVE-2022-4896
Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows with the messages "PNTMEDIDAS", "PEDIR", "HAYDISCOA" or "SPOOLER". A complete denial of service can be achieved by sending multiple requests simultaneously on a core...
PT-2023-15906 · Unknown · Cyber Control
Name of the Vulnerable Software and Affected Versions: Cyber Control version 1.650 Description: The issue affects the generation of pop-up windows on the server with specific messages, including "PNTMEDIDAS", "PEDIR", "HAYDISCOA", or "SPOOLER". A complete denial of service can be achieved by...
CVE-2023-41575
Multiple stored cross-site scripting XSS vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name, Message, or Address parameters...
CVE-2023-41575
Multiple stored cross-site scripting XSS vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name, Message, or Address parameters...
PHPGurukul Blood Bank & Donor Management Cross-Site Scripting Vulnerability
PHPGurukul Blood Bank & Donor Management is a blood bank and donor management system by PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Blood Bank & Donor Management v2.2, which stems from multiple stored cross-site scripting XSS vulnerabilities in the file /bbdms/sign-up.php...
PT-2023-5660 · Unknown · Blood Bank & Donor Management
Name of the Vulnerable Software and Affected Versions: Blood Bank & Donor Management version 2.2 Description: The issue concerns multiple stored cross-site scripting XSS vulnerabilities in the /bbdms/sign-up.php file. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML...
