Out-of-bounds

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2023-2245 hansunCMS unrestricted upload

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2023-2245

CVE-2023-2245 - hansunCMS 1.4.3 unrestricted upload . Affected component: the endpoint /ueditor/net/controller.ashx?action=catchimage in hansunCMS 1.4.3. Root cause described as manipulation allowing unrestricted upload, enabling remote exploitation. Sources indicate the vulnerability is critical...

WordPress Uji Popup Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)

Software Uji Popup Type Plugin Vulnerable versions = 1.4.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23641 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 59d88f6966b4 Credits István Márton Required privileg...

alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting

alextselegidis/easyappointments is vulnerable to stored cross-site scripting in versions 1.4.3 and prior. A patch is available at commit bddc5cbeb7ff237a72943b304dcb01c653781767 and anticipated to be part of version 1.5.0...

GHSA-J6QQ-9939-9JV8 alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting

alextselegidis/easyappointments is vulnerable to stored cross-site scripting in versions 1.4.3 and prior. A patch is available at commit bddc5cbeb7ff237a72943b304dcb01c653781767 and anticipated to be part of version 1.5.0...

PolyMC Launcher 路径遍历漏洞

PolyMC is a custom launcher for Minecraft that makes it easy to manage multiple installations of Minecraft simultaneously. A security vulnerability exists in PolyMC Launcher 1.4.3 and earlier versions, which stems from a directory traversal vulnerability that can be exploited by an attacker to...

CVE-2023-1800

The CVE-2023-1800 issue affects sjqzhang go-fastdfs (up to 1.4.3). The vulnerable component is the File Upload Handler, specifically the Upload function for the path /group1/upload, where path traversal ("../filedir") can be exploited remotely. The exploit has been disclosed publicly (in multiple...

go-fastdfs 代码问题漏洞

go-fastdfs is a simple distributed file system private cloud storage, with no center, high performance, high reliability, maintenance-free and other advantages, support for intermittent uploads, chunked uploads, small file merging, auto-synchronization, auto-repair. sjqzhang go-fastdfs version...

Multiple XSS in Create/Update Funtion Version 1.4.3 and 1.5.0-dev.2

Description Stored XSS on create/update service, categories, settings. I was test on 1.4.3 demo site and 1.5.0-dev2 Proof of Concept Install\ I install from develope branch. When finish install footer display version v1.5.0-dev.2\ The time I run and commit below on image is the latest\ \ webUI\ ...

PT-2023-20953 · Unknown · Opengoofy Hippo4J

Name of the Vulnerable Software and Affected Versions: OpenGoofy Hippo4j version 1.4.3 Description: The issue allows an attacker to obtain sensitive information via the ConfigVerifyController function of the Tenant Management module. Recommendations: For OpenGoofy Hippo4j version 1.4.3, consider...

OpenGoofy Hippo4j 安全漏洞

OpenGoofy Hippo4j is a powerful dynamic thread pooling framework from OpenGoof that comes with monitoring and alerting features. A security vulnerability exists in OpenGoofy Hippo4j v.1.4.3, which stems from an insecure privilege setting. An attacker can exploit the vulnerability to obtain...

PT-2023-20951 · Unknown · Opengoofy Hippo4J

Name of the Vulnerable Software and Affected Versions: OpenGoofy Hippo4j version 1.4.3 Description: An issue in OpenGoofy Hippo4j allows attackers to escalate privileges via the ThreadPoolController of the tenant Management module. Recommendations: For OpenGoofy Hippo4j version 1.4.3, consider...

OpenGoofy Hippo4j 安全漏洞

OpenGoofy Hippo4j is a powerful dynamic thread pooling framework from OpenGoof with monitoring and alerting features. A security vulnerability exists in OpenGoofy Hippo4j v.1.4.3, which can be exploited by an attacker to elevate privileges via the ThreadPoolController in the tenant management...

PT-2023-27907 · Knplabs · Knplabs/Knp-Snappy

Name of the Vulnerable Software and Affected Versions: knplabs/knp-snappy versions prior to 1.4.3 Description: The issue concerns a PHAR deserialization vulnerability in the knplabs/knp-snappy PHP library. This vulnerability allows an attacker to gain remote code execution by exploiting the lack ...

OpenGoofy Hippo4j 安全漏洞

OpenGoofy Hippo4j is a powerful dynamic thread pooling framework from OpenGoof that comes with monitoring and alerting features. A security vulnerability exists in OpenGoofy Hippo4j version v.1.4.3, which stems from an insecure privilege vulnerability that can be exploited by an attacker to eleva...

PT-2023-20952 · Unknown · Opengoofy Hippo4J

Name of the Vulnerable Software and Affected Versions: OpenGoofy Hippo4j version 1.4.3 Description: The issue allows an attacker to escalate privileges via the AddUser method of the UserController function in the Tenant Management module. This is due to an Insecure Permissions vulnerability...

PT-2023-10009 · Mmdeveloper · Mmdeveloper A Forms Plugin

Name of the Vulnerable Software and Affected Versions: MMDeveloper A Forms Plugin versions up to 1.4.2 Description: A problematic issue was found in the MMDeveloper A Forms Plugin, affecting an unknown part of the file a-forms.php. This issue leads to cross-site scripting and can be initiated...

Uncontrolled Resource Consumption in Hashicorp Nomad

HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4...

Denial of service

HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4...