#windows

Employee Record Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

DETS Project version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Bang Resto version 1.0 suffers from an information disclosure vulnerability.

School Log Management System version 1.0 appears to suffers from a remote SQL injection vulnerability that allows an attacker to achieve code execution.

Simple College Website version 1.0 appears to suffers from a remote SQL injection vulnerability that allows an attacker to achieve code execution.

Two security vulnerabilities have been disclosed in the open-source Traccar GPS tracking system that could be potentially exploited by unauthenticated attackers to achieve remote code execution under certain circumstances. Both the vulnerabilities are path traversal flaws and could be weaponized if guest registration is enabled, which is the default configuration for Traccar 5, Horizon3.ai

Cybersecurity researchers have uncovered a never-before-seen dropper that serves as a conduit to launch next-stage malware with the ultimate goal of infecting Windows systems with information stealers and loaders. "This memory-only dropper decrypts and executes a PowerShell-based downloader," Google-owned Mandiant said. "This PowerShell-based downloader is being tracked as PEAKLIGHT." Some of

Crime Complaints Reporting Management System version 1.0 suffers from a remote shell upload vulnerability.

Courier Management System version 1.0 suffers from a cross site request forgery vulnerability.

Company Visitor Management version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.