3DSecure 2.0 3DS Authorization Method Cross Site Scripting
Authored by Rubén López Herrera
Multiple reflected cross site scripting vulnerabilities in the 3DS Authorization Method of 3DSecure version 2.0 allow attackers to inject arbitrary web scripts via the threeDSMethodData...
3DSecure 2.0 3DS Authorization Method Cross Site Request Forgery
Authored by Rubén López Herrera
A cross site request forgery vulnerability was identified in the Authorization Method of 3DSecure version 2.0, allowing attackers to submit unauthorized form data by modifying...
VICIdial 2.14-917a Remote Code Execution
Authored by Jaggar Henry | Site korelogic.com
An attacker with authenticated access to VICIdial version 2.14-917a as an agent can execute arbitrary shell commands as the root user. This attack...
Dairy Farm Shop Management System 1.2 SQL Injection / Code Execution
Authored by indoushka
Dairy Farm Shop Management System version 1.2 suffers from a remote SQL injection vulnerability that allows for a backdoor to be inserted for code execution.
Change Mirror Download
=============================================================================================================================================|...
Online Marriage Registration System 1.0 Shell Upload
Authored by indoushka
Online Marriage Registration System version 1.0 suffers from a remote shell upload vulnerability.
Change Mirror Download
=============================================================================================================================================| # Title : Online Marriage Registration System 1.0...
Online Student Grading System 1.0 SQL Injection
Authored by indoushka
Online Student Grading System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Change Mirror Download
=============================================================================================================================================| # Title :...
Online Survey System 1.0 Remote File Inclusion
Authored by indoushka
Online Survey System version 1.0 suffers from a remote file inclusion vulnerability.
Change Mirror Download
=============================================================================================================================================| # Title : Online Survey System 1.0 File inclusion...
Prison Management System 1.0 Add Administrator
Authored by indoushka
Prison Management System version 1.0 suffers from an add administrator vulnerability.
Change Mirror Download
=============================================================================================================================================| # Title : Prison Management System v1.0 Add Admin Vulnerability...
PowerVR DEVMEMXINT_RESERVATION::ppsPMR Use-After-Free
Authored by Jann Horn, Google Security Research
The array ppsPMR in DEVMEMXINT_RESERVATION holds references to PMR structures (using PMRRefPMR2()), intending to prevent the PMRs' physical memory from being released. However,...
Spring Cloud Data Flow Remote Code Execution
Authored by Kayiyan | Site github.com
Proof of concept exploit for Spring Cloud Data Flow versions prior to 2.11.4 that achieves remote code execution through a malicious upload.
advisories | CVE-2024-37084