21 matches found
PT-2025-53330
Name of the Vulnerable Software and Affected Versions Legrand BTicino Driver Manager F454 version 1.0.51 Description The software contains web vulnerabilities that permit attackers to carry out administrative tasks without sufficient request validation. An attacker can leverage cross-site request...
EUVD-2025-25703
Malicious code in bioql PyPI...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
CVE-2025-55454
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
PT-2025-34488 · Dootask · Dootask
Name of the Vulnerable Software and Affected Versions: DooTask version 1.0.51 Description: An authenticated arbitrary file upload issue exists in the /msg/sendfiles component of DooTask version 1.0.51. This allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: A...
dootask 安全漏洞
dootask is an open source online project task management tool from dootask, Inc. A security vulnerability exists in dootask version 1.0.51, which stems from an authentication arbitrary download issue in the /msg/sendtext component...
CVE-2025-55454
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-55454
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
PT-2025-34498 · Dootask · Dootask
Name of the Vulnerable Software and Affected Versions: DooTask version 1.0.51 Description: DooTask version 1.0.51 contains an authenticated arbitrary download vulnerability within the /msg/sendtext component. Recommendations: At the moment, there is no information about a newer version that...
CVE-2025-55454
CVE-2025-55454 affects DooTask v1.0.51. An authenticated arbitrary file upload weakness in the /msg/sendfiles component allows code execution via a crafted file. Root cause: improper handling of uploaded files enabling execution of attacker-controlled content. Impact: potential remote code execut...
PT-2024-26277 · Unknown · Create A Quote In Frontend + Backend Pro
Name of the Vulnerable Software and Affected Versions: Complete for Create a Quote in Frontend + Backend Pro module versions = 1.0.51 Description: The issue allows attackers to view sensitive information and cause other impacts. This is achieved via methods such as...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop askforaquotemodul version 1.0.51 and prior versions, which stems from...
Dell EMC Avamar ADMe Local File Inclusion Vulnerability
Dell EMC Avamar is a suite of fully virtualized backup and recovery software for servers. A local file inclusion vulnerability exists in the Web Interface in Dell EMC Avamar ADMe versions 1.0.50 and 1.0.51. An attacker could exploit this vulnerability by sending a specially crafted request to...
Legrand BTicino Driver Manager F454 1.0.51 Cross Site Request Forgery
!-- CSRF PoC OpenWebN...
Legrand BTicino Driver Manager F454 1.0.51 CSRF Change Password Exploit
Summary Audio/video web server for the remote control of the system using web pages or the MY HOME portal. The device can operate as a gateway for the use of the MHVisual and Virtual Configurator software - 6 DIN modules. It replaces item F453 and F453AV. Description The application interface...
Legrand BTicino Driver Manager F454 1.0.51 - Cross-Site Request Forgery / Cross-Site Scripting
Exploit for php platform in category web applications input type="hidden" name="password2" value="newpass1...
Legrand BTicino Driver Manager F454 1.0.51 - Cross-Site Request Forgery Cross-Site Scripting
Legrand BTicino Driver Manager F454 1.0.51 - Cross-Site Request Forgery Cross-Site Scripting input type="hidden" name="password2" value="newpass123" /...
Legrand BTicino Driver Manager F454 1.0.51 - Cross-Site Request Forgery / Cross-Site Scripting
input type="submit" value="Submit requ...