51 matches found
CVE-2022-30025
SQL injection in "/Framewrk/Home.jsp" file POST method in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter...
Sql injection
SQL injection in "/Framewrk/Home.jsp" file POST method in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter...
PT-2023-12994 · Tcredence · Tcredence Analytics Ideal Wealth/Funds
Name of the Vulnerable Software and Affected Versions: tCredence Analytics iDEAL Wealth and Funds version 1.0 Description: The issue allows authenticated remote attackers to inject a payload via the v parameter in the "/Framewrk/Home.jsp" file using the POST method. Recommendations: For version...
CVE-2022-30025
CVE-2022-30025 involves an SQL injection in tCredence Analytics iDEAL Wealth and Funds (version 1.0). The vulnerability exposes the POST parameter named v in the URL path "/Framewrk/Home.jsp" to authenticated remote attackers, enabling payload injection and potential data disclosure (as indicated...
Credence Analytics iDEAL Wealth and Funds SQL注入漏洞
Credence Analytics iDEAL Wealth and Funds is a one-stop solution for funds from Credence Analytics India. A security vulnerability exists in Credence Analytics iDEAL Wealth and Funds version 1.0. An attacker can exploit the vulnerability to inject a payload via the "v" parameter, which can lead t...
Making a case for crypto knowledge – why the general population has to be educated on cryptocurrency
By Waqas Cryptocurrency and blockchain education is critical for anyone looking to grow their personal wealth and achieve financial freedom. This is a post from HackRead.com Read the original post: Making a case for crypto knowledge – why the general population has to be educated on cryptocurrenc...
libertythroughwealthnews.com Cross Site Scripting vulnerability OBB-2659363
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Wealth Management System Bonanza Wealth Management System SQL Injection Vulnerability
Wealth Management System Bonanza Wealth Management System is a portfolio management analytics platform from Wealth Management System Ltd. A SQL injection vulnerability exists in Wealth Management System Bonanza Wealth Management System, which can be exploited by attackers to collect passwords in...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
CVE-2022-30335
CVE-2022-30335 affects Bonanza Wealth Management System (BWM) 7.3.2. The vulnerability is a SQL injection in the login form, exploitable via the User Name textbox, which could enable an attacker to collect all passwords in encrypted format from the Microsoft SQL Server component. The connected do...
Wealth Management System Bonanza Wealth Management SQL注入漏洞
Wealth Management System Bonanza Wealth Management System is a portfolio management analytics platform from Wealth Management System Ltd. A SQL injection vulnerability exists in Wealth Management System Bonanza Wealth Management System, which can be exploited by attackers to collect passwords in...
wealthresearchgroup.com Improper Access Control vulnerability OBB-2158164
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
When AIs Start Hacking
If you dont have enough to worry about already, consider a world where AIs are hackers. Hacking is as old as humanity. We are creative problem solvers. We exploit loopholes, manipulate systems, and strive for more influence, power, and wealth. To date, hacking has exclusively been a human activit...
Beijing Chain Home Real Estate Brokerage Co. Chain Home app suffers from denial-of-service vulnerability
Chain Home App is an official client of Chain Home, a large-scale real estate leasing and trading website. Chain Home App provides services of second-hand houses, new houses, rental houses, real estate finance and wealth management, real estate appraisal and other business types. There is a...
Oriental Fortune PC client suffers from dll hijacking vulnerability
Oriental Wealth PC Client is a free stock speculation software developed by Oriental Wealth. There is a dll hijacking vulnerability in Oriental Wealth PC Client, which can be exploited by attackers to execute arbitrary code...
Oriental Wealth Independent Trading Terminal has dll Hijacking Vulnerability
Oriental Wealth Independent Trading Terminal is a software for securities trading under Oriental Wealth. There is a dll hijacking vulnerability that can be exploited by attackers to execute arbitrary code...
wealth-mind.com XSS vulnerability
Open Bug Bounty ID: OBB-697834 Description| Value ---|--- Affected Website:| wealth-mind.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...