89 matches found
PT-2024-15756 · Unknown · Efs Easy Chat Server
Name of the Vulnerable Software and Affected Versions: EFS Easy Chat Server version 3.1 Description: A problematic issue has been found in the HTTP GET Request Handler component of the affected software. The manipulation of the USERNAME argument leads to denial of service. This issue can be...
DeShang DSShop Access Control Error Vulnerability
DeShang DSShop is a single-store mobile mall online store system from DeShang, China. The access control error vulnerability exists in DeShang DSShop prior to version 3.1.0. The vulnerability stems from the file public/install.php of the component HTTP GET Request Handler, which results in...
PT-2023-26480 · Sourcecodester · Sourcecodester Lost/Found Information System
Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /classes/Master.php?f=delete category of the component HTTP POST Request...
CVE-2023-3680
A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=saveitem of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is...
The Gribbit Web Framework 访问控制错误漏洞
The Gribbit Web Framework is a new ultra-safe, ultra-simple, ultra-fast framework from Luke Hutchison's personal developer. It is used to build complex web applications using Java and other JVM languages. A security vulnerability exists in The Gribbit Web Framework, which originates in the functi...
The vulnerability of the HTTP Request Handler component in the SAP Business One License service API allows a perpetrator to execute arbitrary code due to incorrect authentication.
The vulnerability of the HTTP Request Handler component in the SAP Business One License service API is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted HTTP request...
Denial Of Service (DoS)
.NET Core is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown code block of the component Web Request Handler when ASP.NET Core improperly handles web requests causing an application crash impacting availability...
Privilege Escalation
ASP.NET Core and .NET Core are affected by a privilege escalation vulnerability. An unauthenticated attacker could submit malicious input which would lead to privilege escalation due to the way the web request handler handles web requests...
Dell ScriptLogic Asset Manager GetClientPackage SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dell ScriptLogic Asset Manager, also known as Quest Workspace Asset Manager. Authentication is not required to exploit this vulnerability. To exploit this security flaw, an attacker would make a...