An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.Read More ...
Continue ReadingFebruary 17, 2023
Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin Read More ...
Continue ReadingFebruary 17, 2023
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin Read More ...
Continue ReadingFebruary 17, 2023
SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint.Read More ...
Continue ReadingFebruary 17, 2023
Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.Read More ...
Continue ReadingFebruary 17, 2023
An issue was discovered in ESPCMS P8.21120101 after logging in to the background, there is a SQL injection vulnerability in the function node where members are added.Read More ...
Continue ReadingFebruary 17, 2023
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingFebruary 17, 2023
SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sen ...
Continue ReadingFebruary 17, 2023
Back to Main