289 matches found
CMF-Watch-Pro-2-BLE-Protocol
CMF Watch Pro 2 — Protocolo BLE ingeniería inversa No oficial. Este documento describe el protocolo Bluetooth Low Energy BLE del CMF Watch Pro 2 CMF by Nothing, reconstruido mediante ingeniería inversa para una aplicación complementaria alternativa. No está afiliado ni respaldado por Nothing/CMF...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: A possible memory leak has been fixed when attempting to issue a CMF WQE. There is no corresponding free routine if lpfcsli4issuewqe fails to issue the CMF WQE in lpfcissuecmfsyncwqe. If retval is non-zero, then free...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: scsi: lpfc: Fixed the call trace observed during I/O operations with CMF enabled. The following issue was observed with CMF enabled: BUG: Use of smpprocessorid in preemptible code: systemd-udevd/31711 Kernel: Caller is...
PYSEC-2026-2961 Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone
Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS...
PYSEC-2026-2967 Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone
Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS...
MINI-J538-W287-3CMF
Bulletin has no description...
CVE-2026-36962
SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potentially gain remote code execution by writing malicious files to the server's file system via the keyword parameter in the...
CVE-2026-36962
SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potentially gain remote code execution by writing malicious files to the server's file system via the keyword parameter in the...
The vulnerability of the lpfc_issue_cmf_sync_wqe() function in the drivers/scsi/lpfc/lpfc_sli.c module of the Linux operating system’s SCSI device driver, which allows a hacker to cause a service failure.
The vulnerability of the lpfcissuecmfsyncwqe function in the drivers/scsi/lpfc/lpfcsli.c module of the Linux SCSI device driver involves a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...
CVE-2024-58279
appRain CMF 4.0.5 contains an authenticated remote code execution vulnerability that allows administrative users to upload malicious PHP files through the filemanager upload endpoint. Attackers can leverage authenticated access to generate a web shell with command execution capabilities by...
CVE-2024-58279
appRain CMF 4.0.5 contains an authenticated remote code execution vulnerability that allows administrative users to upload malicious PHP files through the filemanager upload endpoint. Attackers can leverage authenticated access to generate a web shell with command execution capabilities by...
CVE-2024-58279 appRain CMF 4.0.5 Authenticated Remote Code Execution via Filemanager Upload
appRain CMF 4.0.5 contains an authenticated remote code execution vulnerability that allows administrative users to upload malicious PHP files through the filemanager upload endpoint. Attackers can leverage authenticated access to generate a web shell with command execution capabilities by...
appRain CMF 代码问题漏洞
appRain CMF is a content management framework from appRain Canada. A code issue vulnerability exists in appRain CMF version 4.0.5 that originates from an authenticated user being able to upload a malicious PHP file via the file manager, which could lead to remote code execution...
EUVD-2022-54694
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix call trace observed during I/O with CMF enabled The following was seen with CMF enabled: BUG: using smpprocessorid in preemptible code: systemd-udevd/31711 kernel: caller is lpfcupdatecmfcmd+0x214/0x420 lpfc kerne...
EUVD-2013-5887
Malware in sbrugna...
EUVD-2011-5128
Malware in sbrugna...
EUVD-2011-5129
Malware in sbrugna...
EUVD-2003-0722
Malware in sbrugna...