An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism.Read More ...
Continue Reading
March 21, 2023
The eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie.Read More ...
Continue Reading
March 21, 2023
The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header.Read More ...
Continue Reading
March 21, 2023
An authenticated attacker can leverage an exposed resource.db() accessor method to smuggle Python method calls via a Jinja template, which can lead to code execution. This issue was resolved in the Ma ...
Continue Reading
March 21, 2023
An authenticated attacker can leverage an exposed âboxâ object to read and write arbitrary files from disk, provided those files can be parsed as yaml or JSON. This issue was resolved in the ...
Continue Reading
March 21, 2023
An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue wa ...
Continue Reading
March 21, 2023
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of reports from the IGSS project report directory, this would le ...
Continue Reading
March 21, 2023
Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenentRead More ...
Continue Reading
March 21, 2023
Back to Main
