Təhlükəsizlik Zəiflikləri arşivleri

Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product’s certain management console and…

CVE-2023-30875

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in All My Web Needs Logo Scheduler plugin <=Â 1.2.0 versions. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri…

TR-23-0472 (Zoho ManageEngine Güvenlik Zafiyeti)

Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını Oku Kaynak: USOM

TR-23-0473 (Rockwell Automation Güvenlik Bildirimi)

Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını Oku Kaynak: USOM

CVE-2023-31492

Incorrect access control in Zoho ManageEngine ADManager Plus Build 7180 allows unauthenticated attackers to view user passwords after executing backup or recovery operations on user…

CVE-2023-28690

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Steinbrecher WP BrowserUpdate plugin <=Â 4.5 versions. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını…

CVE-2023-31944 (online_travel_agency_system)

SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php. Zafiyet…

CVE-2023-31945 (online_travel_agency_system)

SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php. Zafiyet…

CVE-2023-31946 (online_travel_agency_system)

File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the…

CVE-2023-36106

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter…