Lucene search
+L

1029 matches found

NVD
NVD
added 2024/02/08 10:15 p.m.16 views

CVE-2024-24393

File Upload vulnerability index.php in Pichome v.1.1.01 allows a remote attacker to execute arbitrary code via crafted POST request...

9.8CVSS9.7AI score0.01165EPSS
SaveExploits1References1
Prion
Prion
added 2024/02/08 10:15 p.m.22 views

Unrestricted file upload

File Upload vulnerability index.php in Pichome v.1.1.01 allows a remote attacker to execute arbitrary code via crafted POST request...

7.5CVSS8.4AI score0.01165EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2024/02/08 7:15 p.m.40 views

CVE-2024-24215

An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information via a crafted POST request...

5.3CVSS5AI score0.005EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/08 7:15 p.m.10 views

CVE-2024-24215

An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information via a crafted POST request...

5.3CVSS5.8AI score0.005EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/08 12:00 a.m.25 views

CVE-2024-24393

File Upload vulnerability index.php in Pichome v.1.1.01 allows a remote attacker to execute arbitrary code via crafted POST request...

9.8AI score0.01165EPSS
SaveExploits1References1
OSV
OSV
added 2024/02/08 12:00 a.m.15 views

CVE-2024-24393

File Upload vulnerability index.php in Pichome v.1.1.01 allows a remote attacker to execute arbitrary code via crafted POST request...

9.8CVSS7.8AI score
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/08 12:00 a.m.6 views

Pichome Code Issue Vulnerability

Qiaoqiao Times PicHome is a program to quickly create online galleries, audio/video libraries, and text libraries by China Qiaoqiao Times Company. A code issue vulnerability exists in Pichome version v.1.1.01, which originates from index.php that allows remote attackers to execute arbitrary code...

9.8CVSS7.8AI score0.01165EPSS
SaveExploits1References2
CVE
CVE
added 2024/02/08 12:00 a.m.145 views

CVE-2024-24393

CVE-2024-24393 : Pichome v1.1.01 contains an index.php file upload vulnerability that allows a remote attacker to execute arbitrary code via a crafted POST request. Severity is high (CVSS v3.1: 9.8, Network, No user interaction). Connected sources corroborate a remote code execution impact from a...

9.8CVSS9.6AI score0.01165EPSS
SaveExploits1References1Affected Software1
Github Security Blog
Github Security Blog
added 2024/02/05 9:30 p.m.26 views

mingSoft MCMS File Upload vulnerability

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

8.8CVSS7AI score0.17789EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2024/02/05 8:15 p.m.44 views

CVE-2024-22567

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

8.8CVSS8.7AI score0.17789EPSS
SaveExploits1References1
Prion
Prion
added 2024/02/05 8:15 p.m.18 views

Unrestricted file upload

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

6.5CVSS7.2AI score0.17789EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/05 12:00 a.m.1 views

CVE-2024-22567

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

8.7AI score0.17789EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/02/05 12:00 a.m.50 views

CVE-2024-22567

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

8.9AI score0.17789EPSS
SaveExploits1References1
OSV
OSV
added 2024/02/03 9:15 a.m.7 views

CVE-2023-44031

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure locations via a crafted POST request...

7.5CVSS5.8AI score0.00689EPSS
SaveExploits2References3
NVD
NVD
added 2024/02/03 9:15 a.m.35 views

CVE-2023-44031

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure locations via a crafted POST request...

7.5CVSS7.4AI score0.00689EPSS
SaveExploits2References3
Prion
Prion
added 2024/02/03 9:15 a.m.21 views

Improper access control

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure locations via a crafted POST request...

5CVSS6.9AI score0.00689EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/03 12:00 a.m.9 views

PT-2024-13166 · Reprise · Reprise License Manager

Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 15.1 Description: The issue is related to incorrect access control in the software, allowing attackers to save sensitive files in insecure locations using a crafted POST request. Recommendations: For Reprise...

7.5CVSS6.8AI score0.00689EPSS
SaveExploits2References8
CNNVD
CNNVD
added 2024/02/03 12:00 a.m.11 views

Reprise Software Reprise License Manager Security Vulnerability

Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications. A security vulnerability exists in...

7.5CVSS6.5AI score0.00689EPSS
SaveExploits2References3
NVD
NVD
added 2024/01/18 10:15 p.m.13 views

CVE-2023-50614

An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request to /cgi-bin/luci...

7.5CVSS7.3AI score0.00372EPSS
SaveExploits1References1
Prion
Prion
added 2024/01/18 10:15 p.m.14 views

Design/Logic Flaw

An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request to /cgi-bin/luci...

5CVSS6.5AI score0.00372EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder