‼ CVE-2023-3877 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument cost leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235239.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32232 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25074 ‼
📖 Read
via "National Vulnerability Database".
Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies.This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6),vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and prior.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32639 ‼
📖 Read
via "National Vulnerability Database".
Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32231 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. During installation, binaries gets executed out of a subfolder in C:\Windows\Temp. A standard user can create the folder and path file ahead of time and obtain elevated code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3876 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Campcodes Beauty Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-235238 is the identifier assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3874 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as critical, was found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235236.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3878 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235240.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3875 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been found in Campcodes Beauty Salon Management System 0.1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/del_feedback.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235237 was assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-3873 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235235.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21405 ‼
📖 Read
via "National Vulnerability Database".
Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis NetworkIntercoms when communicating over OSDP, highlighting that the OSDP message parser crashesthe pacsiod process, causing a temporary unavailability of the door-controlling functionalitiesmeaning that doors cannot be opened or closed. No sensitive or customer data can be extractedas the Axis device is not further compromised. Please refer to the Axis security advisory for more information, mitigation and affected products and software versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35066 ‼
📖 Read
via "National Vulnerability Database".
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom Software E-Invoice Approval System allows SQL Injection.This issue affects E-Invoice Approval System: before v.20230701.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32637 ‼
📖 Read
via "National Vulnerability Database".
** UNSUPPPORTED WHEN ASSIGNED ** GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34189 ‼
📖 Read
via "National Vulnerability Database".
Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could use general users to delete and update the process, which only the admin can operate occurrences. Users are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick https://github.com/apache/inlong/pull/8109  to solve it.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34434 ‼
📖 Read
via "National Vulnerability Database".
Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could bypass the current logic and achieve arbitrary file reading. To solve it, users are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick https://github.com/apache/inlong/pull/8130 .📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3046 ‼
📖 Read
via "National Vulnerability Database".
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Scienta allows SQL Injection.This issue affects Scienta: before 20230630.1953.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35067 ‼
📖 Read
via "National Vulnerability Database".
Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensitive Strings Within an Executable.This issue affects E-Invoice Approval System: before v.20230701.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21406 ‼
📖 Read
via "National Vulnerability Database".
Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 whencommunicating over OSDP. A heap-based buffer overflow was found in the pacsiod process whichis handling the OSDP communication allowing to write outside of the allocated buffer. Byappending invalid data to an OSDP message it was possible to write data beyond the heapallocated buffer. The data written outside the buffer could be used to execute arbitrary code. lease refer to the Axis security advisory for more information, mitigation and affected products and software versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3884 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/edit_product.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235246 is the identifier assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3881 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235243.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35078 ‼
📖 Read
via "National Vulnerability Database".
Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote attackers to obtain PII, add an administrative account, and change the configuration because of an authentication bypass, as exploited in the wild in July 2023. A patch is available.📖 Read
via "National Vulnerability Database".