[SECURITY] Fedora 40 Update: qt6-qtcharts-6.7.1-1.fc40

Qt Charts module provides a set of easy to use chart components. It uses the Qt Graphics View Framework, therefore charts can be easily integrated to modern user interfaces. Qt Charts can be used as QWidgets, QGra phicsWidget, or QML types. Users can easily create impressive graphs by selecting o...

Yubico YubiKey 5 安全漏洞

Yubico YubiKey 5 is a multi-protocol security secret key device from the Swedish company Yubico. A security vulnerability exists in Yubico YubiKey prior to 5.7.0, Security Key prior to 5.7.0, YubiKey Bio prior to 5.6.4, and YubiKey 5 FIPS prior to 5.7.2, which stems from faulty access control, an...

CVE-2024-5414

A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/getfile.php, 'view' parameter. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to retrieve their...

PT-2024-26899 · Nautobot · Nautobot

Name of the Vulnerable Software and Affected Versions: Nautobot versions 1.3.0 through 1.6.22 Nautobot versions 2.0.0 through 2.2.4 Description: A user with extras.view dynamicgroup permission can use the Dynamic Group detail UI view /extras/dynamic-groups// and/or the members REST API view...

PT-2024-36068 · Unknown · Phpmybackuppro

Name of the Vulnerable Software and Affected Versions: PhpMyBackupPro version 2.3 Description: A vulnerability has been discovered that could allow an attacker to execute XSS through the "/phpmybackuppro/get file.php" API endpoint, using the view parameter. This could allow an attacker to create ...

D-Link D-View Code Execution Vulnerability

D-Link D-View is a Web-based design network device management software from China AUO D-Link. A code execution vulnerability exists in D-Link D-View that stems from the application failing to properly filter special elements that construct code segments. An attacker could exploit the vulnerabilit...

D-Link D-View Trust Management Issue Vulnerability

D-Link D-View is a Web-based design network device management software from China AUO D-Link. A trust management issue vulnerability exists in D-Link D-View8, which stems from the use of hard-coded encryption keys, and can be exploited by an attacker to bypass authentication on the system...

PT-2024-26995 · Orangehrm · Orangehrm

Name of the Vulnerable Software and Affected Versions: OrangeHRM version 3.3.3 Description: The issue allows for SQL injection in the sortOrder parameter of the admin/viewProjects endpoint. This could potentially be exploited to extract or modify sensitive data. Recommendations: For OrangeHRM...

D-Link D-View Code Execution Vulnerability

D-Link D-View is a network management system from D-Link, which is mainly used to centrally manage the performance, security and reliability of network devices. A code execution vulnerability exists in D-Link D-View, which can be exploited by an attacker to execute arbitrary code on an affected...

D-Link D-View Code Execution Vulnerability

D-Link D-View is a network management system from D-Link, which is mainly used to centrally manage the performance, security and reliability of network devices. A code execution vulnerability exists in D-Link D-View, which can be exploited by an attacker to execute arbitrary code...

CVE-2024-5376 Kashipara College Management System view_each_faculty.php cross site scripting

A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file vieweachfaculty.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The...

College Management System 跨站脚本漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to college. A cross-site scripting vulnerability exists in Kashipara College Management System version 1.0, which stems from a...

Mattermost Server安全漏洞

Mattermost Server is an open source messaging platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost Server that stems from an inability to enforce proper access control, which could allow users to view arbitrary post content via the /playbook addlashes...

itsourcecode Student Information Management System SQL注入漏洞

Student Information Management System is an itsourcecode open source student information management system. itsourcecode Student Information Management System version 1.0 SQL injection vulnerability exists , the vulnerability stems from the view.php there is an unknown function , through the...

PT-2024-35924 · Unknown · Itsourcecode Student Information Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information Management System version 1.0 Description: A critical issue was found in the itsourcecode Student Information Management System, affecting an unknown functionality of the file view.php. The manipulation of the...

CVE-2024-5340

A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/vpn/autovpn/subcommit.php. The manipulation of the argument key leads to os command injection. The attack may be launched remotely. The...

Ruijie Networks RG-UAC 操作系统命令注入漏洞

Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. Ruijie Networks RG-UAC suffers from an operating system command injection vulnerability, which originates from an unknown...

(0Day) D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

Pray For Me <= 1.0.4 - Unauthenticated Stored XSS

Description The plugin does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin 1. Configure the plugin to add the first name and last name fields to the form:...

(0Day) D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exists within the TokenUtils class. The issue results from a hard-coded cryptographic key. An attacker ca...