14 matches found
EUVD-2025-48492
Malicious code in candra-getuk23-sukiwir npm...
CVE-2025-48492
GetSimple CMS is a content management system. In versions starting from 3.3.16 to 3.3.21, an authenticated user with access to the Edit component can inject arbitrary PHP into a component file and execute it via a crafted query string, resulting in Remote Code Execution RCE. This issue is set to ...
CVE-2025-48492
creationtimestamp| type| source ---|---|--- 2025-05-30 06:49:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqen5fw36va2...
CVE-2025-48492
GetSimple CMS is affected in versions 3.3.16–3.3.21. An authenticated user with access to the Edit component can inject arbitrary PHP into a component file and execute it via a crafted query string, resulting in Remote Code Execution (RCE). The issue is mitigated by upgrading to version 3.3.22, w...
CVE-2025-48492 GetSimple CMS RCE in Edit component
GetSimple CMS is a content management system. In versions starting from 3.3.16 to 3.3.21, an authenticated user with access to the Edit component can inject arbitrary PHP into a component file and execute it via a crafted query string, resulting in Remote Code Execution RCE. This issue is set to ...
CVE-2025-48492 GetSimple CMS RCE in Edit component
GetSimple CMS is a content management system. In versions starting from 3.3.16 to 3.3.21, an authenticated user with access to the Edit component can inject arbitrary PHP into a component file and execute it via a crafted query string, resulting in Remote Code Execution RCE. This issue is set to ...
CVE-2022-48492
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...
CVE-2023-48492
creationtimestamp| type| source ---|---|--- 2024-01-04 21:22:10+00:00| seen| https://t.me/ctinow/163234...
CVE-2023-48492
Adobe Experience Manager (AEM) prior to 6.5.19.0 is affected by a DOM-based XSS vulnerability (CVE-2023-48492). The issue allows a low-privileged attacker to lure a victim to a crafted URL referencing a vulnerable page, triggering malicious JavaScript execution in the victim’s browser. The CVE de...
CVE-2022-48492
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...
CVE-2022-48492
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...
CVE-2022-48492
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...
CVE-2022-48492
CVE-2022-48492 describes configuration defects in the Secure OS module that can affect availability. Several connected documents associate the issue with Huawei EMUI (Android-based) and mention EMUI 12.0.0, while the NVD entry lists CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base score 7.5). ...
CVE-2022-48492
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...