CVE-2024-41646: Improper Preservation of Permissions

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2dwbcontroller...

CVE-2024-41648

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2regulatedpurepursuitcontroller...

CVE-2024-50965: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an attacker to execute arbitrary code and escalate privileges via a crafted script...

CVE-2023-38920

A Cross-Site Scripting (XSS) vulnerability exists in Cyber Cafe Management System (CCMS) v.1.0 , developed by Anuj Kumar. The flaw allows a local attacker to execute arbitrary code by submitting a crafted script via the adminname parameter. This issue stems from the improper neutralization of inp...

CVE-2024-51055

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...

CVE-2024-51055

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...

CVE-2024-51055

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...

PT-2024-34505 · Hoosk · Hoosk

Name of the Vulnerable Software and Affected Versions: Hoosk version 1.7.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the config.php component. Recommendations: For Hoosk version 1.7.1, consider disabling access to the config.php component...

CVE-2024-51055

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...

CVE-2024-51055

Hoosk version 1.7.1 is vulnerable to remote code execution (RCE) due to an issue where a crafted script can be targeted at the config.php component. This vulnerability allows a remote attacker to execute arbitrary code. To mitigate the risk, it is recommended to disable access to the config.php c...

CVE-2024-51055: Improper Neutralization of Input During Web Page Generation

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...

CVE-2024-51358

An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application...

python-gevent: privilege escalation via a crafted script to the WSGIServer component

A flaw was found in python-event, which could allow a remote attacker to gain elevated privileges on the system, caused by a flaw in the WSGIServer component. By using a specially crafted script, an attacker can gain elevated privileges...

CVE-2024-51358

Linux Server Heimdall version v.2.6.1 is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918) within its Add new application function. A remote attacker can exploit this by providing a crafted script to trigger the execution of arbitrary code . The impact of this vulnerability is rated as...

Heimdall security vulnerabilities

Heimdall is an open source application panel and launcher for LinuxServer.io. A security vulnerability exists in Heimdall version v.2.6.1, which originates from a remote attacker who can execute arbitrary code via a specially crafted script that adds a new application...

CVE-2024-51358

An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application...

CVE-2024-27525

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component...

CVE-2024-27524

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the newticket.php component...

CVE-2024-48195

Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter...

PT-2024-33019 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: eyouCMS version 1.6.7 Description: The issue allows a remote attacker to obtain sensitive information by sending a crafted script to the post parameter. Recommendations: For eyouCMS version 1.6.7, consider restricting access to the post...