CVE-2023-33964 mx-chain-go does not treat invalid transaction with wrong username correctly

mx-chain-go is an implementation of the MultiversX blockchain protocol written in the Go language. Metachain cannot process a cross-shard miniblock. Prior to version 1.4.16, an invalid transaction with the wrong username on metachain is not treated correctly on the metachain transaction processor...

mx-chain-go 安全漏洞

mx-chain-go is a go implementation of the MultiversX protocol open sourced by MultiversX. A security vulnerability exists in mx-chain-go versions prior to 1.4.16, which arises from an invalid transaction caused by using the wrong username that is not properly processed by the Metachain transactio...

CVE-2022-41766

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

UBUNTU-CVE-2022-41766

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

Jobs Portal 3.6 Insecure Settings

==================================================================================================================================== | Title : Jobs Portal V 3.6 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 103.064-bit...

CVE-2022-41766: Incorrect Permission Assignment for Critical Resource

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

CVE-2022-41766

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

PT-2023-14033 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.8 MediaWiki versions 1.36.x through 1.37.4 MediaWiki versions 1.38.x through 1.38.2 Description: An issue was discovered in MediaWiki where the alreadyrolled message can leak a user name upon an action=rollbac...

CVE-2023-33263

Summary: CVE-2023-33263 affects WFTPD 3.25, where usernames and password hashes are stored in an openly viewable wftpd.ini configuration file inside the WFTPD directory. What’s affected: WFTPD 3.25, specifically the wftpd.ini file that contains credentials in plaintext. Root cause / impact: Crede...

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

Sql injection

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

CVE-2023-33338: Improper Neutralization of Special Elements used in an SQL Command

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

Old Age Home Management SQL注入漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in Old Age Home Management version 1.0, which stems from a problem with the username parameter and can be exploited by an attacker to conduct an SQL injection attack...

PT-2023-24305 · Unknown · Old Age Home Management

Name of the Vulnerable Software and Affected Versions: Old Age Home Management version 1.0 Description: The issue concerns SQL Injection via the username parameter. This allows for potential unauthorized access or manipulation of data. Recommendations: For Old Age Home Management version 1.0,...

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

CVE-2022-47311

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successfu...

hyiplab 2.1 Default Credentials

==================================================================================================================================== | Title : hyiplab V2.1 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 108.064-bit | |...

WordPress Elementor Lite 5.7.1 Arbitrary Password Reset Vulnerability

On May 11 2023, Essential Addons for Elementor, a WordPress plugin with over one million active installations, released a patch for a critical vulnerability that made it possible for any unauthenticated user to reset arbitrary user passwords, including user accounts with administrative-level...

PSA: Attackers Actively Exploiting Critical Vulnerability in Essential Addons for Elementor

On May 11 2023, Essential Addons for Elementor, a WordPress plugin with over one million active installations, released a patch for a critical vulnerability that made it possible for any unauthenticated user to reset arbitrary user passwords, including user accounts with administrative-level...