Aggregator

Submit #431949 / VDB-281961

生死之外无大事。尊重他人选择，不要赞美自杀。

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /bloodrequest.php. The manipulation of the argument msg leads to cross site scripting. This vulnerability is handled as CVE-2024-10419. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /file/infoAdd.php. The manipulation of the argument bg leads to sql injection. This vulnerability is known as CVE-2024-10418. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /file/delete.php. The manipulation of the argument bid leads to sql injection. This vulnerability is traded as CVE-2024-10417. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /file/cancel.php. The manipulation of the argument reqid leads to sql injection. The identification of this vulnerability is CVE-2024-10416. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. This vulnerability was named CVE-2024-10415. The attack can be initiated remotely. Furthermore, there is an exploit available.

波音正探索出售其太空业务，该计划处于早期阶段，可能包括出售载人飞船 Starliner 以及支持国际空间站的业务。波音最近深陷困境，737 Max 飞机坠毁事故，两名搭乘 Starliner 的宇航员困在空间站，它制造的一颗通讯卫星在太空停止工作并解体。波音 CEO Kelly Ortberg 在本周的财报电话会议上表示考虑缩小业务规模，以精益求精而不是粗枝大叶。波音会保留核心的商业飞机和防御系统业务。它可能会考虑继续保留 NASA 登月火箭系统 Space Launch System，以及商业和军用卫星业务。

Submit #431784 / VDB-281960

Submit #431782 / VDB-281959

Submit #431783 / VDB-281958

Submit #431781 / VDB-281958

Submit #431686 / VDB-281957

Submit #431685 / VDB-281956

A vulnerability, which was classified as problematic, was found in PHPGurukul Vehicle Record System 1.0. This affects an unknown part of the file /admin/edit-brand.php. The manipulation of the argument Brand Name leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-10414. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The initial researcher advisory mentions the parameter "phone_number" to be affected. But this might be a mistake because the textbox field label is "Brand Name".

Submit #431623 / VDB-281955

A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. The manipulation of the argument image leads to unrestricted upload. This vulnerability is handled as CVE-2024-10413. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. Affected by this vulnerability is the function upload of the file /admin/mod_room/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. This vulnerability is known as CVE-2024-10410. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #431629 / VDB-281675

A vulnerability classified as problematic has been found in wpmudev Forminator Forms Plugin up to 1.35.1 on WordPress. Affected is an unknown function. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2024-10402. It is possible to launch the attack remotely. There is no exploit available.