[webapps] Online Diagnostic Lab Management System 1.0 – Account Takeover (Unauthenticated)
Online Diagnostic Lab Management System 1.0 – Account Takeover (Unauthenticated)
Online Diagnostic Lab Management System 1.0 – Account Takeover (Unauthenticated)
Online Diagnostic Lab Management System 1.0 – SQL Injection (Unauthenticated)
Online Diagnostic Lab Management System 1.0 – Stored Cross Site Scripting (XSS)
SalonERP 3.0.1 – ‘sql’ SQL Injection (Authenticated)
Hospitals Patient Records Management System 1.0 – ‘doctors’ Stored Cross Site Scripting (XSS)
Hospitals Patient Records Management System 1.0 – ‘room_list’ Stored Cross Site Scripting (XSS)
Hospitals Patient Records Management System 1.0 – ‘room_types’ Stored Cross Site Scripting (XSS)
WordPress Core 5.8.2 – ‘WP_Query’ SQL Injection
We present a framework to more easily perform Wi-Fi experiments. It can be used to create fuzzers, implement new attacks, create proof-of-concepts to test for vulnerabilities, automate experiments, implement test suites, and so on. The main advanta…
The first Patch Tuesday of the year 2022 is here. Make sure you’re up to date!
Categories: Exploits and vulnerabilities Tags: cve-2021-22947cve-2021-36976cve-2022-21839cve-2022-21874cve-2022-21907cve-2022-21919CVSSdoseoppatch tuesdayrcesecurity update guide |
The post Update now: Microsoft patches 97 bugs including 6 zero-days and a wormable one appeared first on Malwarebytes Labs.