1520 matches found
[SECURITY] Fedora 34 Update: php-openpsa-universalfeedcreator-1.8.4.1-1.fc34
RSS and Atom feed generator. Supported formats: RSS0.91, RSS1.0, RSS2.0, PIE0.1 deprecated, MBOX, OPML, ATOM, ATOM0.3, HTML, JS, PHP. Autoloader: /usr/share/php/openpsa-universalfeedcreator/autoload.php...
Improper Restriction of XML External Entity Reference in Apache CXF JAX-RS
The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS MessageBodyReaders. These readers use Apache Abdera Parser which expands XML entities by default which represents a major XXE risk...
2022.1 IPU - Intel® Boot Guard and Intel® TXT Advisory
Summary: A potential security vulnerability in Intel® Boot Guard and Intel® Trusted Execution Technology TXT for some Intel® processors may allow escalation of privilege. Intel is releasing firmware updates and prescriptive guidance to mitigate this potential vulnerability. Vulnerability Details:...
CVE-2022-28035
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMSadminajaxblur-save.php...
CVE-2022-28033
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMSadminuploads.php...
CVE-2022-28033
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMSadminuploads.php...
CVE-2022-28035
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMSadminajaxblur-save.php...
Atom.CMS SQL注入漏洞
CMS is a content management system from The Digital Craft individual developers in the U.S. A SQL injection vulnerability exists in Atom.CMS version 2.0, which stems from a lack of validation of external input SQL statements in Atom.CMSadminajaxlist-sort.php, which could be exploited by attackers...
Atom.CMS SQL注入漏洞
CMS is a content management system from The Digital Craft personal developer in the U.S. A SQL injection vulnerability exists in Atom.CMS version 2.0, which stems from a lack of validation of external input SQL statements in Atom.CMSadminajaxblur-save.php, which could be exploited by attackers to...
Atom.CMS SQL注入漏洞
CMS is a content management system from The Digital Craft individual developers in the U.S. A SQL injection vulnerability exists in Atom.CMS version 2.0, which stems from a lack of validation of external input SQL statements in Atom.CMSadminuploads.php, which could be exploited to execute illegal...
The vulnerability of the Perl module XML::Atom, related to incorrect restrictions on XML references to external objects, allows attackers to access confidential data.
The vulnerability of the Perl module XML::Atom is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...
[SECURITY] Fedora 34 Update: gitit-0.13.0.0-5.1.fc34
Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line too ls or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...
Atom CMS 2.0 - Remote Code Execution (RCE)
Exploit Title: Atom CMS 2.0 - Remote Code Execution RCE Date: 22.03.2022 Exploit Author: Ashish Koli Shikari Vendor Homepage: https://thedigitalcraft.com/ Software Link: https://github.com/thedigicraft/Atom.CMS Version: 2.0 Tested on: Ubuntu 20.04.3 LTS CVE: CVE-2022-25487 Description This script...
Atom CMS 1.0.2 Shell Upload
Exploit Title: Atom CMS 2.0 - Remote Code Execution RCE Date: 22.03.2022 Exploit Author: Ashish Koli Shikari Vendor Homepage: https://thedigitalcraft.com/ Software Link: https://github.com/thedigicraft/Atom.CMS Version: 2.0 Tested on: Ubuntu 20.04.3 LTS CVE: CVE-2022-25487 Description This script...
Atom CMS 2.0 - Remote Code Execution Exploit
Exploit Title: Atom CMS 2.0 - Remote Code Execution RCE Exploit Author: Ashish Koli Shikari Vendor Homepage: https://thedigitalcraft.com/ Software Link: https://github.com/thedigicraft/Atom.CMS Version: 2.0 Tested on: Ubuntu 20.04.3 LTS CVE: CVE-2022-25487 Description This script uploads...
Atom CMS SQL Injection Vulnerability
Atom CMS is a content management system. A SQL injection vulnerability exists in Atom CMS version 2.0, which stems from a missing validation of external input SQL statements in the id parameter of /admin/ajax/avatar.php. An attacker could use this vulnerability to execute illegal SQL commands to...
Atom CMS Cross-Site Scripting Vulnerability (CNVD-2022-84074)
Atom CMS, a content management system, is vulnerable to a cross-site scripting vulnerability in Atom CMS v2.0. The vulnerability is caused by a cross-site scripting vulnerability that contains a reflection in the "A" parameter in /widgets/debug.php. An attacker could exploit this vulnerability to...
CVE-2022-25489
Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php...