PT-2024-25809 · 1Panel · 1Panel

Name of the Vulnerable Software and Affected Versions: 1Panel versions prior to 1.10.3-lts Description: The issue is related to command injections in the project that are not well filtered, leading to arbitrary file writes and ultimately to remote code executions RCEs. The mirror configuration...

SAS Stored Process Web Application Cross-Site Scripting Vulnerability

The SAS Stored Process Web Application is a stored procedure web application from SAS. A cross-site scripting vulnerability exists in SAS Stored Process Web Application versions 9.4M7 and 9.4M8, which stems from a reflected cross-site scripting XSS vulnerability in the program parameter of the...

HedgeDoc Security Vulnerabilities

HedgeDoc is a Javascript-based real-time editing and sharing platform for Markdown documents from the HedgeDoc team. A security vulnerability exists in HedgeDoc versions prior to 1.9.9, which stems from a vulnerability that allows an attacker to create a note that matches the ID of an original no...

PT-2023-24192 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton affected versions not specified Description: BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions, a Server-Side Request Forgery SSRF vulnerability exists. Th...

CVE-2023-24528

SAP Fiori apps for Travel Management in SAP ERP My Travel Requests - version 600, allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally exposed over the network and successful exploitation can lead to exposure of...

PT-2023-16416 · Trendnet · Trendnet Tew-652Brp

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-652BRP version 3.04b01 Description: A vulnerability was found in the Web Management Interface of the TRENDnet TEW-652BRP, affecting the processing of the file get set.ccp. The manipulation of the nextPage argument leads to...

Ice Hrm 跨站脚本漏洞

Ice Hrm is a human resource management system. A cross-site scripting vulnerability exists in Ice Hrm 29.0.0 OS. An attacker can exploit the vulnerability to execute arbitrary code via the /app/endpoint parameter...

IBM UrbanCode Deploy Information Disclosure Vulnerability (CNVD-2018-17415)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...