CVE-2023-53941 EasyPHP Webserver 14.1 Remote Code Execution

EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by injecting malicious payloads through the appservicecontrol parameter. Attackers can send POST requests to /index.php?zone=settings with crafted...

CVE-2023-53941

CVE-2023-53941 describes an OS command injection in EasyPHP Webserver 14.1. An unauthenticated attacker can trigger remote code execution by crafting the app_service_control payload and sending a POST to /index.php?zone=settings, leading to commands executed with administrative privileges. The CV...

CVE-2024-2104

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable...

EUVD-2024-27068

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable...

PT-2025-50323

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable...

EUVD-2019-9929

Malware in sbrugna...

EUVD-2023-25944

Malicious code in bioql PyPI...

EUVD-2022-25143

Malicious code in bioql PyPI...

CVE-2025-34162 Bian Que Feijiu Intelligent Emergency and Quality Control System SQL Injection via GetLyfsByParams

An unauthenticated SQL injection vulnerability exists in the GetLyfsByParams endpoint of Bian Que Feijiu Intelligent Emergency and Quality Control System, accessible via the /AppService/BQMedical/WebServiceForFirstaidApp.asmx interface. The backend fails to properly sanitize user-supplied input i...

CVE-2019-1372

An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the...

CVE-2025-1611

A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of the file app/service/ThemeAdminService.php of the component Template Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2025-1611: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of the file app/service/ThemeAdminService.php of the component Template Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit ha...

PT-2024-18684

Name of the Vulnerable Software and Affected Versions SourceCodester Petrol Pump Management Software version 1.0 Description A critical issue affects some unknown functionality of the file /admin/app/service crud.php, allowing unrestricted upload through the manipulation of the photo argument. Th...

How to convert PFX certificate without importing password to PEM certificate on ADC

This article provides instruction on how toconvert PFX certificate with importing password to PEM certificate in our document using "Import PKCS12" on GUI. Refer to...

SUSE CVE-2022-1870

Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

CVE-2023-21777

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability...

CVE-2023-21777

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability...

CVE-2023-21777 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2023-21777 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2023-21777

Technical details about CVE-2023-21777 are not provided in the supplied connected documents. The CVE is described as an elevation of privilege issue in Azure App Service on Azure Stack Hub; no patch/version specifics are included here. Monitor vendor advisories for fixes.