Lucene search
+L

58 matches found

CNVD
CNVD
•added 2023/10/29 12:00 a.m.•11 views

Logic Flaw Vulnerability in Her Money App (CNVD-2023-94870)

She Wealth Management App is a safe and reliable mobile financial software. She Wealth Management APP has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

6.8AI score
SaveExploits0
attackerkb
attackerkb
•added 2023/05/24 9:15 p.m.•8 views

CVE-2022-30025

SQL injection in "/Framewrk/Home.jsp" file POST method in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter...

6.5CVSS6AI score0.0084EPSS
SaveExploits1References2
OSV
OSV
•added 2023/05/24 9:15 p.m.•16 views

CVE-2022-30025

SQL injection in "/Framewrk/Home.jsp" file POST method in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter...

6.5CVSS5.9AI score0.0084EPSS
SaveExploits1References1
NVD
NVD
•added 2023/05/24 9:15 p.m.•31 views

CVE-2022-30025

SQL injection in "/Framewrk/Home.jsp" file POST method in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter...

6.5CVSS6.9AI score0.0084EPSS
SaveExploits1References1
Prion
Prion
•added 2023/05/24 9:15 p.m.•27 views

Sql injection

SQL injection in "/Framewrk/Home.jsp" file POST method in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter...

4CVSS6.9AI score0.0084EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/05/24 12:00 a.m.•65 views

CVE-2022-30025

CVE-2022-30025 involves an SQL injection in tCredence Analytics iDEAL Wealth and Funds (version 1.0). The vulnerability exposes the POST parameter named v in the URL path "/Framewrk/Home.jsp" to authenticated remote attackers, enabling payload injection and potential data disclosure (as indicated...

6.5CVSS6.8AI score0.0084EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/24 12:00 a.m.•7 views

CVE-2022-30025: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in "/Framewrk/Home.jsp" file POST method in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter...

6.5CVSS5.8AI score0.0084EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/05/24 12:00 a.m.•13 views

PT-2023-12994 · Tcredence · Tcredence Analytics Ideal Wealth/Funds

Name of the Vulnerable Software and Affected Versions: tCredence Analytics iDEAL Wealth and Funds version 1.0 Description: The issue allows authenticated remote attackers to inject a payload via the v parameter in the "/Framewrk/Home.jsp" file using the POST method. Recommendations: For version...

6.5CVSS6.8AI score0.0084EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/05/24 12:00 a.m.•17 views

Credence Analytics iDEAL Wealth and Funds SQL注入漏洞

Credence Analytics iDEAL Wealth and Funds is a one-stop solution for funds from Credence Analytics India. A security vulnerability exists in Credence Analytics iDEAL Wealth and Funds version 1.0. An attacker can exploit the vulnerability to inject a payload via the "v" parameter, which can lead t...

6.5CVSS6.8AI score0.0084EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2023/05/10 1:24 p.m.•4 views

Malware in dow-load-you-are-a-badass-at-making-money-master-the-mindset-of-wealth-by-jen-sincero-on-m

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
HackRead
HackRead
•added 2022/11/17 2:48 a.m.•25 views

Making a case for crypto knowledge – why the general population has to be educated on cryptocurrency

By Waqas Cryptocurrency and blockchain education is critical for anyone looking to grow their personal wealth and achieve financial freedom. This is a post from HackRead.com Read the original post: Making a case for crypto knowledge – why the general population has to be educated on cryptocurrenc...

3.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/06/21 7:21 a.m.•16 views

libertythroughwealthnews.com Cross Site Scripting vulnerability OBB-2659363

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNVD
CNVD
•added 2022/05/10 12:00 a.m.•45 views

Wealth Management System Bonanza Wealth Management System SQL Injection Vulnerability

Wealth Management System Bonanza Wealth Management System is a portfolio management analytics platform from Wealth Management System Ltd. A SQL injection vulnerability exists in Wealth Management System Bonanza Wealth Management System, which can be exploited by attackers to collect passwords in...

9.8CVSS1.9AI score0.01231EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/05/09 7:15 p.m.•6 views

CVE-2022-30335

Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...

9.8CVSS7.4AI score0.01231EPSS
SaveExploits0References4
OSV
OSV
•added 2022/05/09 7:15 p.m.•16 views

CVE-2022-30335

Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...

9.8CVSS5.8AI score0.01231EPSS
SaveExploits0References3
NVD
NVD
•added 2022/05/09 7:15 p.m.•19 views

CVE-2022-30335

Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...

9.8CVSS0.01231EPSS
SaveExploits0References3
CVE
CVE
•added 2022/05/09 6:38 p.m.•101 views

CVE-2022-30335

CVE-2022-30335 affects Bonanza Wealth Management System (BWM) 7.3.2. The vulnerability is a SQL injection in the login form, exploitable via the User Name textbox, which could enable an attacker to collect all passwords in encrypted format from the Microsoft SQL Server component. The connected do...

9.8CVSS9.7AI score0.01231EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/05/09 6:38 p.m.•37 views

CVE-2022-30335

Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...

9.9AI score0.01231EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/05/09 12:00 a.m.•3 views

PT-2022-20069

Name of the Vulnerable Software and Affected Versions Bonanza Wealth Management System BWM version 7.3.2 Description The issue allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted...

9.8CVSS0.01231EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/05/09 12:00 a.m.•17 views

Wealth Management System Bonanza Wealth Management SQL注入漏洞

Wealth Management System Bonanza Wealth Management System is a portfolio management analytics platform from Wealth Management System Ltd. A SQL injection vulnerability exists in Wealth Management System Bonanza Wealth Management System, which can be exploited by attackers to collect passwords in...

9.8CVSS8.6AI score0.01231EPSS
SaveExploits0References4
Rows per page
Query Builder