Skip to content
OpenAdvisories

Archive

25 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /25 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-38501 Public exploit Scanner template

    copyparty vulnerable to reflected cross-site scripting via k304 parameter

    copyparty is file server software. Prior to version 1.8.7, the application contains a reflected cross-site scripting via URL-parameter `?k304=...` and `?setck=...`. The worst-case outcome of this is being able to move or delete existing files on the server, o…

    9001 copyparty copyparty PyPI
  • Medium 4.8
    CVE-2023-3897 Public exploit

    Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page

    Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version

    Onpremise SureMDM Solution SureMDM Onpremise
  • Medium 6.3
    CVE-2023-3881 Public exploit

    Campcodes Beauty Salon Management System forgot-password.php sql injection

    A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument contactno leads to sql inject…

    Campcodes Beauty Salon Management System