142 matches found
Apache Struts 2 - Remote Command Execution
Apache Struts 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 is susceptible to remote command injection attacks. The Jakarta Multipart parser has incorrect exception handling and error-message generation during file upload attempts, which can allow an attacker to execute arbitrary commands via a...
MINI-966J-5638-CXFM
Bulletin has no description...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
apache-struts-cve-2017-56...
MINI-97H9-5638-WWRF
Bulletin has no description...
CGA-5638-W48X-XG3X
Bulletin has no description...
CVE-2026-5638
creationtimestamp| type| source ---|---|--- 2026-04-06 10:28:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit2l73xjh2o...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
Apache Struts2 S2-045 RCE CVE-2017-5638 📌 Overview This...
CGA-G885-96HV-5638
Bulletin has no description...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
SSP ASSIGNEMENT 3 : CVE poc Exploitation of CVE-2017-5638...
EUVD-2021-27087
Malware in sbrugna...
EUVD-2025-5638
Malicious code in bioql PyPI...
CVE-2025-5638
creationtimestamp| type| source ---|---|--- 2025-06-05 09:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqtxwijg7y2k...
CVE-2025-5638 PHPGurukul Notice Board System admin-profile.php sql injection
A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. Th...
CVE-2025-5638
CVE-2025-5638 affects PHPGurukul Notice Board System 1.0. The vulnerability resides in /admin-profile.php, where manipulating the mobilenumber parameter leads to SQL injection. Exploitation can be performed remotely, and multiple parameters may be affected. Multiple connected sources corroborate ...
CVE-2021-3844
Rapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user account's current session...
CVE-2020-5638
Cross-site scripting vulnerability in desknet's NEO desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier allows remote attackers to inject arbitrary script via unspecified vectors...
CVE-2013-5638
Transcend WiFiSD 1.8 has persistent XSS...
Linux Distros Unpatched Vulnerability : CVE-2012-5638
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content o...
Oracle Siebel CRM (April 2017 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2017 CPU advisory. - Vulnerability in the Siebel Apps - E-Billing component of Oracle Siebel CRM subcomponent: Security Struts 2. Supported versions that are affected are 6.1,...