Sql injection

A vulnerability, which was classified as critical, was found in OpenCycleCompass server-php. Affected is an unknown function of the file api1/login.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. This product is using a rolling...

CVE-2023-27264

creationtimestamp| type| source ---|---|--- 2023-02-27 18:28:06+00:00| seen| https://t.me/cibsecurity/58959...

CVE-2020-1611

creationtimestamp| type| source ---|---|--- 2023-02-25 05:53:57+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1745...

CVE-2021-35370

creationtimestamp| type| source ---|---|--- 2023-02-24 18:19:24+00:00| seen| https://t.me/cibsecurity/58877...

CVE-2022-48345

creationtimestamp| type| source ---|---|--- 2023-02-24 12:49:17+00:00| seen| https://t.me/cibsecurity/58856 2025-03-12 15:40:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7319...

OESA-2023-1122 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: curl supports "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with...

CVE-2023-1006

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suff...

CVE-2023-0998

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possib...

Sql injection

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

CVE-2022-41217

creationtimestamp| type| source ---|---|--- 2023-02-22 18:22:38+00:00| seen| https://t.me/cibsecurity/58684 2025-01-09 08:14:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/907...

CVE-2021-23947

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none...

CVE-2023-0936

A vulnerability was found in TP-Link Archer C50 V2160801. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation leads to denial of service. The attack can only be initiated within the local network. The...

Cross site scripting

A vulnerability, which was classified as problematic, was found in generator-hottowel 0.0.11. Affected is an unknown function of the file app/templates/src/server/app.js of the component 404 Error Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

CVE-2023-0913

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sellvehicle. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

CVE-2022-45586

creationtimestamp| type| source ---|---|--- 2023-02-15 20:49:41+00:00| seen| https://t.me/cibsecurity/58252 2023-12-06 17:38:49+00:00| seen| https://t.me/arpsyndicate/1519 2025-03-19 18:19:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8114...

CVE-2023-25192

creationtimestamp| type| source ---|---|--- 2023-02-15 18:47:13+00:00| seen| https://t.me/cibsecurity/58240...

CVE-2023-25762

creationtimestamp| type| source ---|---|--- 2023-02-15 16:36:34+00:00| seen| https://t.me/cibsecurity/58227...

CVE-2022-45154

creationtimestamp| type| source ---|---|--- 2023-02-15 12:41:19+00:00| seen| https://t.me/cibsecurity/58219 2025-03-18 19:48:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7983...

SUSE CVE-2012-2826

Google Chrome before 20.0.1132.43 does not properly implement texture conversion, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

SUSE CVE-2012-4225

NVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local users to write to arbitrary physical memory locations and gain privileges by modifying the VGA window using /dev/nvidia0...