438 matches found
DEBIAN-CVE-2023-46733
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 5.4.21 and 6.2.7 and prior to versions 5.4.31 and 6.3.8, SessionStrategyListener does not migrate the session after every successful login. It does so only in case the logged in...
Symfony Security Vulnerabilities
Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony, Inc. A security vulnerability exists in Symfony that stems from a user identifier not changing between the authentication phase and a successful login...
Best Courier Management System Security Vulnerability
Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System version v.1.0 that could allow a remote attacker to execute arbitrary code and prompt for privileges via the userID parameter using a...
PT-2023-30281 · Unknown · Best Courier Management System
Name of the Vulnerable Software and Affected Versions: Best Courier Management System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter. Recommendations: For Best Courier Management System...
CVE-2023-46930
creationtimestamp| type| source ---|---|--- 2023-11-01 17:21:47+00:00| seen| https://t.me/cibsecurity/73330...
sudo-rs: Path Traversal vulnerability
Impact An issue was discovered where usernames containing the . and / characters could result in the corruption of specific files on the filesystem. As usernames are generally not limited by the characters they can contain, a username appearing to be a relative path can be constructed. For exampl...
TTSPlanning SQL Injection Vulnerability
TTSPlanning is a solar power monitoring application from TTSPlanning Japan. TTSPlanning suffers from a SQL injection vulnerability that stems from the fact that manipulation of the parameter uid can lead to sql injection...
CVE-2023-24548
creationtimestamp| type| source ---|---|--- 2023-08-29 20:17:40+00:00| seen| https://t.me/cibsecurity/69364...
CVE-2023-4436
A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0. This issue affects some unknown processing of the file app/action/editupdate.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated...
CVE-2023-30477
creationtimestamp| type| source ---|---|--- 2023-08-14 18:24:31+00:00| seen| https://t.me/cibsecurity/68447...
PT-2023-25413 · WordPress · Simple Author Box
Name of the Vulnerable Software and Affected Versions: The Simple Author Box WordPress plugin versions prior to 2.52 Description: The issue is related to the disclosure of arbitrary user information due to a lack of verification of the user ID before outputting information about that user. This c...
CVE-2023-33993
creationtimestamp| type| source ---|---|--- 2023-08-08 07:13:49+00:00| seen| https://t.me/cibsecurity/67935...
CVE-2023-2309
creationtimestamp| type| source ---|---|--- 2023-07-24 14:25:57+00:00| seen| https://t.me/cibsecurity/67143...
CVE-2023-32050
creationtimestamp| type| source ---|---|--- 2023-07-11 22:35:59+00:00| seen| https://t.me/cibsecurity/66430...
CVE-2021-33223
An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...
UBUNTU-CVE-2023-0386
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalat...
CVE-2022-45636
creationtimestamp| type| source ---|---|--- 2023-03-21 21:35:07+00:00| seen| https://t.me/cibsecurity/60404...
CVE-2023-24859
creationtimestamp| type| source ---|---|--- 2023-03-14 19:30:17+00:00| seen| https://t.me/cibsecurity/60002...