Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.Read More ...
Continue ReadingMarch 10, 2023
An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.Read More ...
Continue ReadingMarch 10, 2023
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingMarch 10, 2023
A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ...
Continue ReadingMarch 09, 2023
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php.Read More ...
Continue ReadingMarch 09, 2023
Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php.Read Mo ...
Continue ReadingMarch 09, 2023
onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component admincontrollerplugins.Read More ...
Continue ReadingMarch 09, 2023
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.Read More ...
Continue ReadingMarch 09, 2023
Back to Main