E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/delete_user.php.Read More ...
Continue Reading
March 14, 2023
maddy is a composable, all-in-one mail server. Starting with version 0.2.0 and prior to version 0.6.3, maddy allows a full authentication bypass if SASL authorization username is specified when using ...
Continue Reading
March 14, 2023
Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a directory traversal vulnerability allows the inclusion of server-side files. Th ...
Continue Reading
March 13, 2023
Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don't correctly neutralize `dir/../filename` sequences, such as `/etc/nginx/../passwd` ...
Continue Reading
March 13, 2023
Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information.Read More ...
Continue Reading
March 13, 2023
Back to Main
