Lucene search
K

36545 matches found

RedhatCVE
RedhatCVE
added 2025/12/01 9:22 a.m.12 views

CVE-2025-13786

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public...

9.8CVSS6.9AI score0.00477EPSS
Exploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/01 7:1 a.m.12 views

Security Bulletin: Due to use of quartz-jobs, IBM Sterling Partner Engagement Manager is vulnerable to a code injection.

Summary IBM Sterling Partner Engagement Managaer uses quartz-jobs, within the product CVE-2025-4447. Vulnerability Details CVEID:CVE-2023-39017 DESCRIPTION: quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component...

9.8CVSS8.5AI score0.01017EPSS
Exploits1Affected Software1
CNNVD
CNNVD
added 2025/12/01 12:0 a.m.4 views

RestaurantWebsite 代码注入漏洞

RestaurantWebsite is an online food ordering and table reservation system by the individual developer Idriss JAIRI. RestaurantWebsite suffers from a code injection vulnerability that stems from the incorrect operation of the parameter selecteddate in the component Make a Reservation, which could...

5.3CVSS5AI score0.00263EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/01 12:0 a.m.5 views

vLLM 代码注入漏洞

vLLM is a vLLM open source high throughput and memory efficient inference and service engine for LLM. A code injection vulnerability exists in vLLM versions prior to 0.11.1 that stems from the presence of a remote code execution vector in the NemotronNanoVLConfig configuration class, which could...

8.8CVSS6.5AI score0.00575EPSS
Exploits0References3
EUVD
EUVD
added 2025/11/30 6:30 p.m.3 views

EUVD-2025-199935

A security flaw has been discovered in Qualitor 8.20/8.24. Affected by this vulnerability is the function eval of the file /html/st/stdeslocamento/request/getResumo.php. Performing manipulation of the argument passageiros results in code injection. Remote exploitation of the attack is possible. T...

7.5CVSS7.2AI score0.00395EPSS
Exploits0References5
NVD
NVD
added 2025/11/30 4:15 p.m.6 views

CVE-2025-13792

A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97. Affected by this vulnerability is the function eval of the file /html/st/stdeslocamento/request/getResumo.php. Performing a manipulation of the argument passageiros results in code injection. Remote exploitation of the attack...

7.5CVSS0.00395EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/11/30 4:2 p.m.5 views

CVE-2025-13792 Qualitor getResumo.php eval code injection

A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97. Affected by this vulnerability is the function eval of the file /html/st/stdeslocamento/request/getResumo.php. Performing a manipulation of the argument passageiros results in code injection. Remote exploitation of the attack...

7.5CVSS7AI score0.00395EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2025/11/30 4:2 p.m.1 views

CVE-2025-13792

A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97. Affected by this vulnerability is the function eval of the file /html/st/stdeslocamento/request/getResumo.php. Performing a manipulation of the argument passageiros results in code injection. Remote exploitation of the attack...

7.5CVSS5.1AI score0.00395EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/11/30 4:2 p.m.10 views

CVE-2025-13792 Qualitor getResumo.php eval code injection

A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97. Affected by this vulnerability is the function eval of the file /html/st/stdeslocamento/request/getResumo.php. Performing a manipulation of the argument passageiros results in code injection. Remote exploitation of the attack...

7.5CVSS0.00395EPSS
Exploits0References6
GithubExploit
GithubExploit
added 2025/11/30 3:58 p.m.173 views

Exploit for Code Injection in Sitecore Experience_Commerce

CVE-...

9.8CVSS7.1AI score0.86685EPSS
Exploits7
EUVD
EUVD
added 2025/11/30 9:30 a.m.5 views

EUVD-2025-199928

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public...

7.5CVSS6.5AI score0.00477EPSS
Exploits1References6
NVD
NVD
added 2025/11/30 9:15 a.m.9 views

CVE-2025-13786

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public...

9.8CVSS0.00477EPSS
Exploits1References5
OSV
OSV
added 2025/11/30 9:15 a.m.7 views

CVE-2025-13786

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public...

9.8CVSS5.6AI score
Exploits0References5
Cvelist
Cvelist
added 2025/11/30 9:2 a.m.13 views

CVE-2025-13786 taosir WTCMS index.php fetch code injection

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public...

7.5CVSS0.00477EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/30 9:2 a.m.6 views

CVE-2025-13786 taosir WTCMS index.php fetch code injection

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public...

7.5CVSS6.7AI score0.00477EPSS
Exploits1References5
CVE
CVE
added 2025/11/30 9:2 a.m.12 views

CVE-2025-13786

CVE-2025-13786 affects taosir WTCMS. The vulnerability is in the fetch function of /index.php, where manipulation of the content parameter leads to code injection. Impact is remote execution with high severity; exploit publicly available. The product uses a rolling release, and the reports do not...

9.8CVSS6.7AI score0.00477EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/11/30 12:0 a.m.5 views

wtcms 代码注入漏洞

wtcms is a ThinkPHP-based content management system CMS by Taosir Individual Developer. A code injection vulnerability exists in wtcms, which stems from incorrect manipulation of the parameter content in the file /index.php, which could lead to code injection...

9.8CVSS7.6AI score0.00477EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/30 12:0 a.m.8 views

PT-2025-48388

Name of the Vulnerable Software and Affected Versions taosir WTCMS affected versions not specified Description A code injection issue exists in the fetch function of the /index.php file. Manipulation of the content argument can lead to code injection, and the attack can be initiated remotely. The...

9.8CVSS7.4AI score0.00477EPSS
Exploits1References12
CNNVD
CNNVD
added 2025/11/30 12:0 a.m.4 views

Qualitor 代码注入漏洞

Qualitor is a managed service process and centralized service platform from Qualitor, Inc. A code injection vulnerability exists in Qualitor versions 8.20 and 8.24, which stems from the incorrect manipulation of the parameter passageiros in the file /html/st/stdeslocamento/request/getResumo.php,...

7.5CVSS7.5AI score0.00395EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/11/30 12:0 a.m.2 views

Ecommerce-Website 代码注入漏洞

Ecommerce-Website is a full-fledged e-commerce website by Winston Dsouza Individual Developer with an admin panel built using PHP and MySql. A code injection vulnerability exists in Ecommerce-Website, which stems from the incorrect operation of the parameter Error in the file...

5.3CVSS5AI score0.00265EPSS
Exploits0References5
Rows per page
Query Builder