CVE-2023-47024
Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in t ...
Continue ReadingOctober 21, 2024
SAP SOAP RFC EPS_GET_DIRECTORY_LISTING Directories Information Disclosure
...Read More ...
Continue ReadingSeptember 01, 2024
SAP SOAP RFC PFL_CHECK_OS_FILE_EXISTENCE File Existence Check
...Read More ...
Continue ReadingSeptember 01, 2024
CVE-2022-29474
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a director ...
Continue ReadingJune 06, 2024
CVE-2023-29863
Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter in the WSDL...Read More ...
Continue ReadingJune 06, 2024
Back to Main