CVE-2024-3521

The CVE-2024-3521 case covers Byzoro Smart S80 Management Platform (versions up to 20240317). The root cause is in /useratte/userattestation.php where the web_img parameter enables unrestricted upload, enabling a remote attacker to upload arbitrary content. Documents indicate the vulnerability is...

CVE-2024-3521 Byzoro Smart S80 Management Platform userattestation.php unrestricted upload

A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be...

Exploit for Command Injection in Dlink Dns-320L_Firmware

CVE-2024-3273 - D-Link Remote Code Execution RCE :boom: A c...

CVE-2024-3465

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been classified as critical. Affected is the function laporanfilter of the file /application/controller/Transaki.php. The manipulation of the argument dari/sampai leads to sql injection. It is possible to launch the...

CVE-2024-3466

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function laporanfilter of the file /application/controller/Pengeluaran.php. The manipulation of the argument dari/sampai leads to sql injection. The...

CVE-2024-3466

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function laporanfilter of the file /application/controller/Pengeluaran.php. The manipulation of the argument dari/sampai leads to sql injection. The...

CVE-2024-3466 SourceCodester Laundry Management System Pengeluaran.php laporan_filter sql injection

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function laporanfilter of the file /application/controller/Pengeluaran.php. The manipulation of the argument dari/sampai leads to sql injection. The...

CVE-2024-3466 SourceCodester Laundry Management System Pengeluaran.php laporan_filter sql injection

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function laporanfilter of the file /application/controller/Pengeluaran.php. The manipulation of the argument dari/sampai leads to sql injection. The...

CVE-2024-3466

CVE-2024-3466 affects SourceCodester Laundry Management System 1.0, specifically the function laporan_filter in /application/controller/Pengeluaran.php. The root cause is input manipulation of the dari/sampai parameter leading to SQL injection. Impact is high: potential unauthorized data access o...

CVE-2024-3465

CVE-2024-3465 affects SourceCodester Laundry Management System 1.0. The vulnerable component is the laporan_filter function in /application/controller/Transaki.php, where manipulating the dari/sampai parameters leads to an SQL injection. The vulnerability can be exploited remotely, and the exploi...

CVE-2024-3465 SourceCodester Laundry Management System Transaki.php laporan_filter sql injection

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been classified as critical. Affected is the function laporanfilter of the file /application/controller/Transaki.php. The manipulation of the argument dari/sampai leads to sql injection. It is possible to launch the...

CVE-2024-3463

A vulnerability has been found in SourceCodester Laundry Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /karyawan/edit. The manipulation of the argument karyawan leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2024-3464 SourceCodester Laundry Management System Pelanggan.php laporan_filter sql injection

A vulnerability was found in SourceCodester Laundry Management System 1.0 and classified as critical. This issue affects the function laporanfilter of the file /application/controller/Pelanggan.php. The manipulation of the argument jeniskelamin leads to sql injection. The attack may be initiated...

CVE-2024-3464

SourceCodester Laundry Management System 1.0 contains a SQL injection in the laporan_filter function (file /application/controller/Pelanggan.php) via the jeniskelamin parameter. This allows remote exploitation with impact on confidentiality, integrity, and availability (CVE-2024-3464). Exploitati...

CVE-2024-3463 SourceCodester Laundry Management System edit cross site scripting

A vulnerability has been found in SourceCodester Laundry Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /karyawan/edit. The manipulation of the argument karyawan leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2024-3463 SourceCodester Laundry Management System edit cross site scripting

A vulnerability has been found in SourceCodester Laundry Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /karyawan/edit. The manipulation of the argument karyawan leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2024-3463

CVE-2024-3463 affects SourceCodester Laundry Management System v1.0, with a cross-site scripting flaw in the /karyawan/edit endpoint triggered by manipulating the karyawan parameter. The issue can be exploited remotely and has public exploitation details (VDB-259744). Connected sources corroborat...

CVE-2024-3458

A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/addikev2.php. The manipulation of the argument TunnelId leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-3458 Netentsec NS-ASG Application Security Gateway add_ikev2.php sql injection

A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/addikev2.php. The manipulation of the argument TunnelId leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-3458 Netentsec NS-ASG Application Security Gateway add_ikev2.php sql injection

A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/addikev2.php. The manipulation of the argument TunnelId leads to sql injection. The attack can be initiated remotely. The exploit has...