EUVD-2002-1980

Malware in sbrugna...

CVE-2002-2000

ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access data...

CVE-2024-21939

Incorrect default permissions in the AMD Cloud Manageability Service ACMS Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21939

Incorrect default permissions in the AMD Cloud Manageability Service ACMS Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21939: Incorrect Default Permissions

Incorrect default permissions in the AMD Cloud Manageability Service ACMS Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

PT-2022-20079

Name of the Vulnerable Software and Affected Versions Air Cargo Management System version 1.0 Description The issue concerns SQL Injection via the "/acms/admin/?page=transactions/manage transaction&id=" endpoint. This allows for potential manipulation of database queries. No information is provid...

PT-2022-20075

Name of the Vulnerable Software and Affected Versions Air Cargo Management System version 1.0 Description The issue concerns SQL Injection vulnerability via the "/acms/classes/Master.php?f=delete cargo type" API endpoint. This allows for potential unauthorized access and manipulation of data. No...

PT-2022-20077

Name of the Vulnerable Software and Affected Versions Air Cargo Management System version 1.0 Description The issue concerns SQL Injection via the /acms/classes/Master.php?f=delete cargo API endpoint. This allows for potential manipulation of database queries. No information is provided about the...

PT-2022-20078

Name of the Vulnerable Software and Affected Versions Air Cargo Management System version 1.0 Description The issue concerns SQL Injection via the /acms/admin/cargo types/manage cargo type.php?id= endpoint. This allows for potential manipulation of database queries using the id parameter...

CVE-2022-30370: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargotype...

CVE-2022-30371: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargotypes/viewcargotype.php?id=...

CVE-2022-30374: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions/managetransaction&id=...

CVE-2022-30372: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargo...

CVE-2022-30373: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargotypes/managecargotype.php?id=...

AFU, AFD and XSS vulnerabilities in Uploadify

Hello 3APA3A! These are Arbitrary File Uploading, Arbitrary File Deletion and Cross-Site Scripting vulnerabilities in Uploadify. Particularly in the version used in aCMS it looks like these developers use modified version of Uploadify, but other developers also can use such version...

Uploadify 2.1.4 File Upload / XSS / File Deletion

Hello list! These are Arbitrary File Uploading, Arbitrary File Deletion and Cross-Site Scripting vulnerabilities in Uploadify. Particularly in the version used in aCMS it looks like these developers use modified version of Uploadify, but other developers also can use such version...

XSS and CS vulnerabilities in aCMS

Hello 3APA3A! After previous Cross-Site Scripting, Content Spoofing, Information Leakage, Insufficient Authorization and Arbitrary File Uploading vulnerabilities in aCMS, here are new ones. These are Cross-Site Scripting and Content Spoofing vulnerabilities in aCMS. This is commercial CMS...

IA and AFU vulnerabilities in aCMS

Hello 3APA3A! These are Insufficient Authorization and Arbitrary File Uploading vulnerabilities in aCMS. This is commercial CMS. There are multiple vulnerabilities in aCMS and it's the second part of them. ------------------------- Affected products: ------------------------- Vulnerable are aCMS...

Multiple vulnerabilities in aCMS

Hello 3APA3A! These are Cross-Site Scripting, Content Spoofing and Information Leakage vulnerabilities in aCMS. This is commercial CMS. There are multiple vulnerabilities in aCMS and it's the first part of them. ------------------------- Affected products: ------------------------- Vulnerable are...

aCMS 1.0 Shell Upload / Insufficient Authorization

Hello list! These are Insufficient Authorization and Arbitrary File Uploading vulnerabilities in aCMS. This is commercial CMS. There are multiple vulnerabilities in aCMS and it's the second part of them. ------------------------- Affected products: ------------------------- Vulnerable are aCMS 1....