This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingNovember 16, 2022
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php.Read More ...
Continue ReadingNovember 16, 2022
A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into t ...
Continue ReadingNovember 16, 2022
An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file.Read More ...
Continue ReadingNovember 16, 2022
SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php.Read More ...
Continue ReadingNovember 16, 2022
Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request.Read More ...
Continue ReadingNovember 16, 2022
Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile.Read More ...
Continue ReadingNovember 16, 2022
Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts.Read More ...
Continue ReadingNovember 16, 2022
Back to Main