PT-2024-22868 · Mozilocms · Mozilocms

Name of the Vulnerable Software and Affected Versions: moziloCMS version 2.0 Description: The issue allows attackers to bypass file upload restrictions, potentially leading to unauthorized file execution or storage of malicious content. This is achieved by renaming files, which can result in the...

CVE-2024-29368

CVE-2024-29368 affects moziloCMS v2.0, targeting the file handling module. The vulnerability enables an attacker to bypass extension restrictions by renaming uploaded files, potentially allowing arbitrary code execution or storage of malicious content. Public documentation from multiple sources c...

The vulnerability of the formexeCommand function (/goform/execCommand) in the Tenda AC500 router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC500 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...

The vulnerability of the R7WebsSecurityHandler function (/goform/execCommand) in the Tenda AC500 router software allows a hacker to execute arbitrary code.

The vulnerability of function R7WebsSecurityHandler /goform/execCommand in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...

The vulnerability of the fromDhcpListClient function (/goform/DhcpListClient) in the Tenda AC500 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromDhcpListClient function /goform/DhcpListClient in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...

The vulnerability of the web interface of Tp-Link AC1350 wireless access points allows a hacker to trigger a service failure.

The vulnerability of the web interface of Tp-Link AC1350 wireless access points is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTTP POST request...

CVE-2024-2912

CVE-2024-2912 (BentoML) has documented insecure deserialization leading to remote code execution (RCE). The vulnerability arises when a serialized object is crafted to execute OS commands during deserialization and sent to BentoML endpoints via POST requests, allowing attackers to run arbitrary c...

PT-2024-22740

Name of the Vulnerable Software and Affected Versions BentoML affected versions not specified Description An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability,...

BentoML 安全漏洞

BentoML is an open source modeling service library from BentoML Open Source. for building high-performance and scalable AI applications using Python. A security vulnerability exists in BentoML that stems from the presence of an insecure deserialization vulnerability that allows Remote Code...

CVE-2024-28270

An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request to /prod-api/user/resetPassword...

CVE-2024-28270

CVE-2024-28270 affects web-flash v3.0. A vulnerability allows an attacker to reset passwords for arbitrary users by sending a crafted POST request to /prod-api/user/resetPassword. CVSS v3.1 base score 8.1 (HIGH); attack vector NETWORK, complexity LOW, privileges LOW, user interaction NONE, with c...

web-flash 安全漏洞

web-flash is an enilu open source web system based on Spring Boot and Vue.js. A security vulnerability exists in web-flash version v3.0, which originated from a vulnerability that allows an attacker to reset an arbitrary user's password via a crafted POST request...

The vulnerability of the fromSetWirelessRepeat function (/goform/WifiExtraSet) in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromSetWirelessRepeat function /goform/WifiExtraSet in the Tenda AC7 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the formWifiWpsStart function (/goform/WifiWpsStart) in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiWpsStart function /goform/WifiWpsStart in the Tenda AC7 router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through...

The vulnerability of the fromSetRouteStatic function (/goform/SetStaticRouteCfg) in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromSetRouteStatic function /goform/SetStaticRouteCfg in the Tenda AC7 router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the fromAddressNat function (/goform/addressNat) in the Tenda FH1202 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromAddressNat function /goform/addressNat in the Tenda FH1202 router microprogramming system involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility ...

CVE-2023-50969

Thales Imperva SecureSphere WAF 14.7.0.40 allows remote attackers to bypass WAF rules via a crafted POST request, a different vulnerability than CVE-2021-45468...

CVE-2024-25239

SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloyeeakpoly/Account/login.php...

CVE-2024-23721

A Directory Traversal issue was discovered in processpost on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calls the function and exports information...

CVE-2024-26492

An issue in Online Diagnostic Lab Management System 1.0 allows a remote attacker to gain control of a 'Staff' user account via a crafted POST request using the id, email, password, and cpass parameters...