Year: 2023

Online Pizza Ordering System /php-opos/index.php SQL injection |

March 23, 2023

NAME__________Online Pizza Ordering System /php-opos/index.php SQL injectionPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Online Pizza Ordering System is vulnerable to SQL injection. A...

Simple Art Gallery SQL injection | CVE-2023-1499

March 23, 2023

NAME__________Simple Art Gallery SQL injectionPlatforms Affected:Risk Level:6.3Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Simple Art Gallery is vulnerable to SQL injection. A remote authenticated attacker...

Simple and Nice Shopping Cart Script file upload | CVE-2023-1497

March 23, 2023

NAME__________Simple and Nice Shopping Cart Script file uploadPlatforms Affected:Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Simple and Nice Shopping Cart Script could allow a...

MEGAFEIS, BOFEI DBD+ Application for IOS & Android information disclosure | CVE-2022-45634

March 23, 2023

NAME__________MEGAFEIS, BOFEI DBD+ Application for IOS & Android information disclosurePlatforms Affected:Risk Level:7.5Exploitability:Proof of ConceptConsequences:Obtain Information DESCRIPTION__________MEGAFEIS, BOFEI DBD+ Application for...

Responsive Hotel Site SQL injection | CVE-2023-1498

March 23, 2023

NAME__________Responsive Hotel Site SQL injectionPlatforms Affected:Risk Level:6.3Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Responsive Hotel Site is vulnerable to SQL injection. A remote authenticated attacker...

Human Resource Management System /hrm/controller/login.php SQL injection |

March 23, 2023

NAME__________Human Resource Management System /hrm/controller/login.php SQL injectionPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Human Resource Management System is vulnerable to SQL injection. A...

Slimstat Analytics Plugin for WordPress SQL injection | CVE-2023-0630

March 23, 2023

NAME__________Slimstat Analytics Plugin for WordPress SQL injectionPlatforms Affected:WordPress Slimstat Analytics Plugin for WordPress 4.9.3.2Risk Level:5.4Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Slimstat Analytics Plugin for...

IBM WebSphere Application Server cross-site scripting | CVE-2023-26283

March 23, 2023

NAME__________IBM WebSphere Application Server cross-site scriptingPlatforms Affected:IBM WebSphere Application Server 9.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________IBM WebSphere Application Server 9.0 is vulnerable...

IBM QRadar SIEM privilege escalation | CVE-2022-43863

March 23, 2023

NAME__________IBM QRadar SIEM privilege escalationPlatforms Affected:IBM Security QRadar SIEM 7.5 IBM Security QRadar SIEM 7.4.3Risk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________IBM QRadar SIEM...

VISAM VBASE Automation Base XML external entity injection | CVE-2022-41696

March 23, 2023

NAME__________VISAM VBASE Automation Base XML external entity injectionPlatforms Affected:Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________VISAM VBASE Automation Base is vulnerable to an XML...

Keysight N6845A Geolocation Server privilege escalation | CVE-2023-1399

March 23, 2023

NAME__________Keysight N6845A Geolocation Server privilege escalationPlatforms Affected:Keysight N6845A Geolocation Server 2.4.2Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Keysight N6845A Geolocation Server could allow a...

VISAM VBASE Automation Base XML external entity injection | CVE-2022-45468

March 23, 2023

VISAM VBASE Automation Base XML external entity injection | CVE-2022-46286

March 23, 2023

VISAM VBASE Automation Base XML external entity injection | CVE-2022-45121

March 23, 2023

MEGAFEIS, BOFEI DBD+ Application for IOS & Android information disclosure | CVE-2022-45635

March 23, 2023

VISAM VBASE Automation Base XML external entity injection | CVE-2022-43512

March 23, 2023

VISAM VBASE Automation Base XML external entity injection | CVE-2022-46300

March 23, 2023

Cisco ASA, FTD, IOS and IOS XE Software denial of service | CVE-2023-20081

March 23, 2023

NAME__________Cisco ASA, FTD, IOS and IOS XE Software denial of servicePlatforms Affected:Cisco Adaptive Security Appliance Software Cisco IOS Software Cisco...

Cisco IOS XE Software denial of service | CVE-2023-20100

March 23, 2023

NAME__________Cisco IOS XE Software denial of servicePlatforms Affected:Cisco IOS XE Software Cisco Catalyst 9800 Series Wireless Controllers Cisco Catalyst 9800...

Cisco IOS XE Software privilege escalation | CVE-2023-20065

March 23, 2023

NAME__________Cisco IOS XE Software privilege escalationPlatforms Affected:Cisco IOS XE SoftwareRisk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Cisco IOS XE Software could allow a local...

Cisco IOS XE SD-WAN Software command execution | CVE-2023-20035

March 23, 2023

NAME__________Cisco IOS XE SD-WAN Software command executionPlatforms Affected:Cisco IOS XE Software Cisco Cloud Services Router (CSR) 1000V Series Cisco 1000...

Cisco SD-WAN vManage Software cross-site request forgery | CVE-2023-20113

March 23, 2023

NAME__________Cisco SD-WAN vManage Software cross-site request forgeryPlatforms Affected:Cisco SD-WAN vManage softwareRisk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Cisco SD-WAN vManage Software is vulnerable to...

Rockwell Automation ThinManager directory traversal | CVE-2023-27856

March 23, 2023

NAME__________Rockwell Automation ThinManager directory traversalPlatforms Affected:Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Rockwell Automation ThinManager could allow a remote attacker to traverse directories on...

Rockwell Automation ThinManager denial of service | CVE-2023-27857

March 23, 2023

NAME__________Rockwell Automation ThinManager denial of servicePlatforms Affected:Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Rockwell Automation ThinManager is vulnerable to a denial of service,...

Year: 2023

Online Pizza Ordering System /php-opos/index.php SQL injection |

Simple Art Gallery SQL injection | CVE-2023-1499

Simple and Nice Shopping Cart Script file upload | CVE-2023-1497

MEGAFEIS, BOFEI DBD+ Application for IOS & Android information disclosure | CVE-2022-45634

Responsive Hotel Site SQL injection | CVE-2023-1498

Human Resource Management System /hrm/controller/login.php SQL injection |

Slimstat Analytics Plugin for WordPress SQL injection | CVE-2023-0630

IBM WebSphere Application Server cross-site scripting | CVE-2023-26283

IBM QRadar SIEM privilege escalation | CVE-2022-43863

VISAM VBASE Automation Base XML external entity injection | CVE-2022-41696

Keysight N6845A Geolocation Server privilege escalation | CVE-2023-1399

VISAM VBASE Automation Base XML external entity injection | CVE-2022-45468

VISAM VBASE Automation Base XML external entity injection | CVE-2022-46286

VISAM VBASE Automation Base XML external entity injection | CVE-2022-45121

MEGAFEIS, BOFEI DBD+ Application for IOS & Android information disclosure | CVE-2022-45635

VISAM VBASE Automation Base XML external entity injection | CVE-2022-43512

VISAM VBASE Automation Base XML external entity injection | CVE-2022-46300

Cisco ASA, FTD, IOS and IOS XE Software denial of service | CVE-2023-20081

Cisco IOS XE Software denial of service | CVE-2023-20100

Cisco IOS XE Software privilege escalation | CVE-2023-20065

Cisco IOS XE SD-WAN Software command execution | CVE-2023-20035

Cisco SD-WAN vManage Software cross-site request forgery | CVE-2023-20113

Rockwell Automation ThinManager directory traversal | CVE-2023-27856

Rockwell Automation ThinManager denial of service | CVE-2023-27857

[RANSOMHUB] – Ransomware Victim: www[.]americanstandard-us[.]com

[SPACEBEARS] – Ransomware Victim: Christian Community Aid

[CLOP] – Ransomware Victim: JOMARSOFTCORP[.]COM

Microsoft Monthly Security Update (October 2024)

CVE Alert: CVE-2025-21566

You may have missed