‼ CVE-2022-31966 ‼
📖 Read
via "National Vulnerability Database".
ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simple_chat_bot/classes/Master.php?f=delete_img.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30999 ‼
📖 Read
via "National Vulnerability Database".
FriendsofFlarum (FoF) Upload is an extension that handles file uploads intelligently for your forum. If FoF Upload prior to version 1.2.3 is configured to allow the uploading of SVG files ('image/svg+xml'), navigating directly to an SVG file URI could execute arbitrary Javascript code decided by an attacker. This Javascript code could include the execution of HTTP web requests to Flarum, or any other web service. This could allow data to be leaked by an authenticated Flarum user, or, possibly, for data to be modified maliciously. This issue has been patched with v1.2.3, which now sanitizes uploaded SVG files. As a workaround, remove the ability for users to upload SVG files through FoF Upload.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32001 ‼
📖 Read
via "National Vulnerability Database".
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/view_product.php?id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28690 ‼
📖 Read
via "National Vulnerability Database".
The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30815 ‼
📖 Read
via "National Vulnerability Database".
elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30349 ‼
📖 Read
via "National Vulnerability Database".
siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44097 ‼
📖 Read
via "National Vulnerability Database".
EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via Addmessage.php. This allows a remote attacker to compromise Application SQL database.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26975 ‼
📖 Read
via "National Vulnerability Database".
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30514 ‼
📖 Read
via "National Vulnerability Database".
School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:126.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27782 ‼
📖 Read
via "National Vulnerability Database".
libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31354 ‼
📖 Read
via "National Vulnerability Database".
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get_vehicle_service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31346 ‼
📖 Read
via "National Vulnerability Database".
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service.📖 Read
via "National Vulnerability Database".
🕴 Building America's Cybersecurity Infrastructure 🕴
📖 Read
via "Dark Reading".
The government is putting the right skills and expertise in place to fight the rising cyber threat.📖 Read
via "Dark Reading".
Dark Reading
Building America's Cybersecurity Infrastructure
The government is putting the right skills and expertise in place to fight the rising cyber threat.
🔏 U.S. Warns of Karakurt Data Extortion Group 🔏
📖 Read
via "".
The group reportedly obtains access to organizations either through stolen login credentials or already compromised victims.📖 Read
via "".
Digital Guardian
U.S. Warns of Karakurt Data Extortion Group
The group reportedly obtains access to organizations either through stolen login credentials or already compromised victims.
‼ CVE-2022-31992 ‼
📖 Read
via "National Vulnerability Database".
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=court_rentals/view_court_rental&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32013 ‼
📖 Read
via "National Vulnerability Database".
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/category/index.php?view=edit&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31990 ‼
📖 Read
via "National Vulnerability Database".
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_product.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31988 ‼
📖 Read
via "National Vulnerability Database".
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/daily_services_report&date=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32007 ‼
📖 Read
via "National Vulnerability Database".
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32015 ‼
📖 Read
via "National Vulnerability Database".
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31985 ‼
📖 Read
via "National Vulnerability Database".
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_sales_report&date=.📖 Read
via "National Vulnerability Database".