Tag: SourceCodester

  • Vulnerability Watch No54

    acmailer Authorization Flaw Enables Admin-Level Sub-Accounts • Atarim WordPress Plugin File Deletion Can Lead to RCE • TRENDnet Router Ping Interface Exposed to Command Injection • armeria-xds TLS Verification Flaw Enables MITM Attacks • TRENDnet TEW-823DRU Admin Endpoint Allows Command Injection…

  • Vulnerability Watch No47

    Hard-Coded Credentials Expose LB-LINK X-PRO • SQL Injection Hits SourceCodester Timetabling System • Fastify Multipart Flaw Enables Persistent Disk Exhaustion • Fastify Multipart Bug Can Exhaust Disk and Event Loop • Fastify JWT Key Override Breaks Authorization Boundaries…

  • Vulnerability Watch No36

    GStreamer ASF Demuxer Integer Flaws Trigger Out-of-Bounds Reads • GStreamer ADPCM Decoder Flaw Risks Memory Corruption and Code Execution • Uasoft Badaso File API Permission Flaw Has Public Exploit • ipTIME AX8004M Command Injection Has Public Exploit • Kingston FURY CTRL Driver Flaw Enables Improper Privilege Management…

  • Vulnerability Watch No32

    go-git Symlink Escape Can Reach Files Outside Worktrees • ZenML Artifact Poisoning Enables Remote Code Execution • Absinthe Federation Atom Exhaustion Can Crash Erlang Nodes • ClamAV XAR Parser Memory Corruption Can Trigger DoS • Crafted Mach-O Files Can Crash ClamAV Scanners…

  • Vulnerability Watch No5

    fast-uri URL Parsing Flaw Can Bypass Host-Based Security Checks • SQL Injection Found in SourceCodester Class and Exam Timetabling System • Public SQL Injection Vulnerability Impacts SourceCodester Timetabling System • uproot Code Generation Bug Enables Arbitrary Python Execution • Fastify Reply Plugin Cache Collision Risks Cross-Upstream Access…

  • Vulnerability Watch No4

    Missing Authentication Flaw in SimpleUI AjaxAdmin • Gerapy Project Upload Endpoint Authentication Bypass • Authorization Bug Exposes RT-Claw RPC Handler • QueryWeaver Signup Flow Authentication Bypass • SQL Injection in Class and Exam Timetabling System…