Data Manipulation

Slims 9 Bulian server-side request forgery | CVE-2023-40969

September 9, 2023

NAME__________Slims 9 Bulian server-side request forgeryPlatforms Affected:Slims9 Bulian 9.6.1Risk Level:6.1Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Slims 9 Bulian is vulnerable to server-side request forgery,...

FreeBSD header injection | CVE-2023-4809

September 8, 2023

NAME__________FreeBSD header injectionPlatforms Affected:FreeBSD FreeBSD 12.0 FreeBSD FreeBSD 13.0 FreeBSD FreeBSD 13.2 FreeBSD FreeBSD 12.4Risk Level:6.5Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________FreeBSD is vulnerable...

Cacti SQL injection | CVE-2023-39365

September 7, 2023

NAME__________Cacti SQL injectionPlatforms Affected:Cacti Cacti 1.2.24Risk Level:4.6Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Cacti is vulnerable to SQL injection. A remote attacker could send specially-crafted...

Realgimm SQL injection | CVE-2023-41636

September 5, 2023

NAME__________Realgimm SQL injectionPlatforms Affected:GruppoSCAI RealGimm 1.1.37p38Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Realgimm is vulnerable to SQL injection. A remote attacker could send specially-crafted...

Realgimm file upload | CVE-2023-41638

September 5, 2023

NAME__________Realgimm file uploadPlatforms Affected:GruppoSCAI RealGimm 1.1.37p38Risk Level:5.3Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Realgimm could allow a remote attacker to upload arbitrary files, caused by...

PHPJabbers Business Directory Script index.php SQL injection | CVE-2023-41539

September 2, 2023

NAME__________PHPJabbers Business Directory Script index.php SQL injectionPlatforms Affected:PHPJabbers Business Directory Script 3.2Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________PHPJabbers Business Directory Script is vulnerable...

Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software SQL injection | CVE-2023-31171

September 2, 2023

NAME__________Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software SQL injectionPlatforms Affected:Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet SoftwareRisk Level:5.9Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Schweitzer Engineering...

SpringBlade SQL injection | CVE-2023-40787

August 31, 2023

NAME__________SpringBlade SQL injectionPlatforms Affected:SpringBlade SpringBlade 3.6.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________SpringBlade is vulnerable to SQL injection. A remote attacker could send specially...

Sourcecodester Inventory Management System SQL injection | CVE-2023-4557

August 30, 2023

NAME__________Sourcecodester Inventory Management System SQL injectionPlatforms Affected:Sourcecodester Inventory Management System 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Sourcecodester Inventory Management System is vulnerable to...

Sourcecodester Online Graduate Tracer System SQL injection | CVE-2023-4556

August 30, 2023

NAME__________Sourcecodester Online Graduate Tracer System SQL injectionPlatforms Affected:Sourcecodester Online Graduate Tracer System 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Sourcecodester Online Graduate Tracer System...

Data Manipulation

Slims 9 Bulian server-side request forgery | CVE-2023-40969

FreeBSD header injection | CVE-2023-4809

Cacti SQL injection | CVE-2023-39365

Realgimm SQL injection | CVE-2023-41636

Realgimm file upload | CVE-2023-41638

PHPJabbers Business Directory Script index.php SQL injection | CVE-2023-41539

Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software SQL injection | CVE-2023-31171

SpringBlade SQL injection | CVE-2023-40787

Sourcecodester Inventory Management System SQL injection | CVE-2023-4557

Sourcecodester Online Graduate Tracer System SQL injection | CVE-2023-4556

SPA-Cart eCommerce CMS SQL injection | CVE-2023-4548

Sourcecodester Inventory Management System SQL injection | CVE-2023-4558

Juniper Junos OS Multiple Vulnerabilities

IBM Security Guardium SQL injection | CVE-2023-33852

IceWarp Icearp local file include | CVE-2023-39699

Geomatika IsiGeo SQL injection | CVE-2023-23563

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37433

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37432

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37429

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37434

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37436

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37431

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37438

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37437

[PLAY] – Ransomware Victim: Specialty Bolt And Screw

[PLAY] – Ransomware Victim: Trace3

[PLAY] – Ransomware Victim: Bendheim

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

CISA: CISA Adds Two Known Exploited Vulnerabilities to Catalog

You may have missed