Results
25,043· Page 176/501Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts.
An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob"
There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0.
An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstnam
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clas
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clas
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clas
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clas
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admi
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clas
htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php
mm-wiki v0.2.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add u
mm-wiki v0.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the markdown editor.
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip
SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.
A directory traversal vulnerability was discovered in Wuzhicms 4.1.0. via /coreframe/app/attachment/admin/index.php:
An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue
An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue
D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to caus
A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7
Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to
An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (buil
In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retriev
Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability. A remote unauthenticated mal
Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could poten
Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance
An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue
An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue
An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue
An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue
An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via Reade
Key reuse in GoSecure Titan Inbox Detection & Response (IDR) through 2022-04-05 leads to remote code execution. To explo
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /ad
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/mo
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/hi
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ch
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to o
A SQL injection vulnerability in license_update.php in Mumara Classic through 2.93 allows a remote unauthenticated attac
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
Test your stack for 2022issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.