Nokia VitalSuite SPM SQL Injection Vulnerability

NOKIA VitalSuite SPM is a multi-vendor, multi-application performance management solution from Nokia Finland. A security vulnerability exists in NOKIA VitalSuite SPM version 2020. An attacker exploited the vulnerability to perform SQL injection via UserName...

Cross-site Scripting (XSS)

facturascripts/facturascripts is vulnerable to cross site scripting. The vulnerability exists due to a lack of sanitization of the username field allowing an attacker to input maliciously crafted script via the username field when showing 'login-user-not-found' message...

Employee Leaves Management System Cross-Site Request Forgery Vulnerability

Employee Leaves Management System ELMS is an internal employee management system. A cross-site request forgery vulnerability exists in Employee Leaves Management System ELMS v2.1, which can be exploited by an attacker to change the details of any user profile, such as username, phone number, etc...

CVE-2022-33174

Power Distribution Units running on Powertek firmware multiple brands before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an emp...

CVE-2022-23168

The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--...

Sql injection

The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--...

CVE-2022-32741

Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...

CVE-2022-32741

Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...

CVE-2022-32741

Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...

UBUNTU-CVE-2022-32741

Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...

CVE-2022-32741 Information disclosure in Request New Password feature

Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...

CVE-2022-32741

The CVE-2022-32741 entry concerns OTRS (versions 7.x up to 7.0.35 and 8.x up to 8.0.23) where the Request New Password feature can leak valid usernames via response-time differences, enabling user enumeration. The root cause is timing-based information disclosure in the password-reset flow. The p...

CVE-2022-32741

Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...

PT-2022-15894

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue allows an attacker to gain access to the database. It is caused by a SQL injection vulnerability in the username parameter at the login panel. The attack can be performed by...

OTRS security vulnerabilities

OTRS is an application from the German company OTRS. A service management software. A security vulnerability exists in OTRS versions 8.0.x through 8.0.23 and OTRS versions 7.0.x through 7.0.35, which stems from a difference in application response times. An attacker could exploit the vulnerabilit...

CVE-2022-23168: Improper Neutralization of Special Elements used in an SQL Command

The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--...

Design/Logic Flaw

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration e.g., username and password...

PT-2022-8038

Name of the Vulnerable Software and Affected Versions Netwave IP camera devices affected versions not specified Description The issue allows an unauthenticated attacker to exfiltrate sensitive information, such as username and password, from the network configuration of Netwave IP camera devices...

CVE-2022-30898

A Cross-site request forgery CSRF vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password...

Cross site request forgery (csrf)

A Cross-site request forgery CSRF vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password...