Remote Code Execution

This vulnerability allows an attacker to manipulate the database of a men's salon management system by injecting harmful SQL commands through a specific page. To exploit this, the attacker needs access to the web application and must target the appointments viewing feature.

This vulnerability allows an attacker to manipulate the database of a men's salon management system by sending specially crafted requests to delete appointments. To exploit this, the attacker needs access to the specific URL that handles appointment deletions, which could lead to unauthorized data removal or other malicious actions.

This vulnerability allows an attacker to delete any files on a system running WiseCleaner Wise Force Deleter version 7.3.2 or earlier by sending a specially crafted request. The attacker needs access to the system where the software is installed to exploit this weakness.

This vulnerability allows an attacker to cause a heap-based buffer overflow, which can lead to unexpected behavior or crashes in the affected software. However, the attack can only be executed locally, meaning the attacker must have access to the system where the software is running.

This vulnerability allows an attacker to gain full control over the management features of OpenMQ by logging in as an administrator using the default username and password, which are often left unchanged. The attacker only needs access to the service port, making it easy for them to exploit this weakness if the default credentials are not updated.

This vulnerability allows an attacker to bypass the security checks on cryptographic signatures in the SQLBot application, potentially allowing unauthorized access to sensitive data. However, exploiting this flaw requires a high level of skill and is considered complex, making it difficult for most attackers to take advantage of it.

This vulnerability allows an attacker to crash the Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module by flooding it with UDP packets, causing it to become unresponsive. To recover the device, a system reset is necessary, making it a significant risk for systems relying on this equipment.

This vulnerability allows a remote attacker to crash Mitsubishi Electric's FX5-EIP EtherNet/IP Module by flooding it with UDP packets, leading to a denial-of-service situation where the device stops functioning. To recover, the affected system must be manually reset, making it vulnerable to disruption if targeted.

This vulnerability allows an attacker to manipulate the database of the Chamilo learning management system by injecting harmful SQL commands through specific user input fields. It can be exploited by anyone sending crafted data to the application before version 1.11.30, potentially leading to unauthorized access or data manipulation.

This vulnerability allows an attacker with administrative access to the Chamilo learning management system to run any code they want on the server, potentially taking full control of it. It affects versions 1.11.12 to 1.11.26, and has been fixed in the latest version, so it's crucial to update to protect against this risk.

This vulnerability allows attackers to run any code they want on the server without needing to log in, simply by sending specially crafted data. The only requirement is that the attacker must be able to send this malicious data to the server, making it a serious risk for exposed systems.

An attacker can remotely manipulate the ID argument in the university management system's admin page to execute unauthorized SQL commands, potentially accessing or altering sensitive data. This vulnerability can be exploited without needing special access, making it a significant risk for the system.

This vulnerability allows an attacker to remotely run malicious code on a system by tricking it into downloading and executing harmful files. The attacker does not need to log in or have any special access, making it particularly dangerous.

This vulnerability allows attackers to remotely execute malicious programs on a system without needing any authentication. They can trick the system into downloading and running harmful files from the internet, making it critical to secure the affected software.

This vulnerability allows an attacker to inject malicious scripts into the university management system, which can then be executed in the browsers of users visiting the affected page. The attack can be carried out remotely, meaning the attacker doesn't need physical access to the system, and it is now publicly known, increasing the risk of exploitation.

This vulnerability allows an attacker to execute malicious SQL commands on the university management system, potentially giving them access to sensitive data or the ability to manipulate the database. The attacker can exploit this issue remotely by manipulating the ID parameter in a specific admin file, making it a serious risk if not addressed.

This vulnerability allows an attacker to execute SQL injection attacks remotely by manipulating the student_id parameter in a specific admin file of the society management system. If successfully exploited, the attacker could gain unauthorized access to the database, potentially exposing sensitive information.

This vulnerability allows an attacker to inject and execute malicious code on a server remotely by manipulating file imports in the affected application. It requires the attacker to send specially crafted requests to the Flow Import Endpoint, making it a serious risk if the application is exposed to the internet.

An attacker can potentially cause user sessions to expire in the web-based pharmacy management system, which could disrupt users' access. However, exploiting this vulnerability is difficult and requires specific knowledge, making it less likely to be used in real-world attacks.

This vulnerability allows an attacker to corrupt memory by manipulating WAV files processed by the SoLoud audio library, potentially leading to crashes or arbitrary code execution. However, the attack can only be carried out locally, meaning the attacker needs access to the system where the vulnerable software is running.