Results
25,043· Page 348/501ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary m
ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with gen
ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token
OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer
OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes ex
Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could p
Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthentic
Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker co
Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication
KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.
UCMS v1.6 was discovered to contain an arbitrary file read vulnerability.
UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability.
An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displayg
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=displ
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&s
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&val
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&val
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes
Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Mas
Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Mast
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=agen
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.ph
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.p
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.p
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.p
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classe
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classe
Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchas
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\posi
Test your stack for 2022issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.