115 matches found
PT-2026-32124
Name of the Vulnerable Software and Affected Versions Totolink A7100RU version 7.4cu.2313 b20191024 Description A flaw exists in the CGI Handler component of the Totolink A7100RU. Specifically, the setDiagnosisCfg function within the /cgi-bin/cstecgi.cgi file is susceptible to os command injectio...
DSA-6116-1 chromium - security update
Bulletin has no description...
EUVD-2019-13459
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2018-6116
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a...
CVE-2025-6116
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been classified as critical. This affects an unknown part of the file /IntraFieldVehicle/Search of the component API. The manipulation of the argument Value leads to sql injection. It is possible to initiate the atta...
CVE-2025-6116
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been classified as critical. This affects an unknown part of the file /IntraFieldVehicle/Search of the component API. The manipulation of the argument Value leads to sql injection. It is possible to initiate the atta...
CVE-2025-6116
creationtimestamp| type| source ---|---|--- 2025-06-16 09:37:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18426 2025-06-16 11:40:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrpvie34ij2s...
CVE-2025-6116 Das Parking Management System 停车场管理系统 API Search sql injection
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been classified as critical. This affects an unknown part of the file /IntraFieldVehicle/Search of the component API. The manipulation of the argument Value leads to sql injection. It is possible to initiate the atta...
CVE-2025-6116
Das Parking Management System (version 6.2.0) contains a SQL injection vulnerability in the API file /IntraFieldVehicle/Search, caused by unsafely handling the Value argument. The issue is exploitable remotely and has been publicly disclosed. Several sources (NVD, Red Hat, CNVD/CIRCL/CVE listings...
CVE-2024-6116
A vulnerability, which was classified as critical, has been found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file editroom.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be...
Hanwha Vision NVR Remote Code Execution (CVE-2023-6116)
An attacker could inject arbitrary attack code by manipulating http url parameters. However, in order to succeed in the attack, the base address of the stack memory must be obtained. The default address depends on firmware version, configuration option information, and the attack is unlikely to...
CVE-2024-6116 itsourcecode Simple Online Hotel Reservation System edit_room.php unrestricted upload
A vulnerability, which was classified as critical, has been found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file editroom.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be...
CVE-2024-6116 itsourcecode Simple Online Hotel Reservation System edit_room.php unrestricted upload
A vulnerability, which was classified as critical, has been found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file editroom.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be...
CVE-2023-6116
Hanwha Vision NVR/DVR remote code execution (CVE-2023-6116) arises from a flaw that allows arbitrary code execution by injecting code into HTTP request parameters. The vulnerability affects Hanwha Vision network video recorders (NVRs) and digital video recorders (DVRs) where the base address of s...
CVE-2023-6116 Remote Code Execution without authentication using stack overflow
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker could inject malicious into http request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report...
CVE-2023-6116 Remote Code Execution without authentication using stack overflow
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker could inject malicious into http request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report...
BELL-CVE-2019-6116 CVE-2019-6116 does not affect BellSoft software
Bulletin has no description...
Ubuntu: Security Advisory (USN-6116-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2019-6116
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution...
Debian DLA-2989-1 : ghostscript - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2989 advisory. - Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839. CVE-2019-25059 - It was found...