A vulnerability classified as critical has been found in SourceCodester Automatic Question Paper Generator System 1.0. This affects an unknown part of the file classes/Users.php?f=save_ruser. The mani ...
Continue ReadingMarch 23, 2023
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingMarch 23, 2023
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter. This vulnerability allows attackers t ...
Continue ReadingMarch 23, 2023
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function.Read More ...
Continue ReadingMarch 23, 2023
In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenar ...
Continue ReadingMarch 23, 2023
In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication.Read More ...
Continue ReadingMarch 23, 2023
XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php.Read More ...
Continue ReadingMarch 23, 2023
IS Decisions UserLock MFA 11.01 is vulnerable to authentication bypass using scheduled task.Read More ...
Continue ReadingMarch 23, 2023
Back to Main