CVE-2019-13387

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.846, Reflected XSS in filemanager2.php parameter fmcurrentdir allows attackers to steal a cookie or session, or redirect to a phishing website...

CVE-2019-9871

Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission...

Remote code execution

Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission...

CVE-2019-9871

Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission...

CVE-2019-9871

CVE-2019-9871 affects Jector Smart TV FM-K75 devices, where an open ADB port with root permissions enables remote code execution. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE listings) with high/critical impact (network, no privileges required) and a base score aroun...

CVE-2019-11456

Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code...

CVE-2019-8436

imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...

CVE-2019-8436

imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...

CVE-2019-8436

CVE-2019-8436 affects imcat 4.5 and is caused by Stored XSS via the root/run/adm.php fm[instop][note] parameter. The connected sources consistently report this vulnerability without providing specific patch details or affected product revisions beyond imcat 4.5. The exploitation, scope, and remed...

CVE-2018-18324

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fmcurrentdir parameter, or the admin/index.php module, servicestart, servicefullstatus, servicerestart, servicestop, or file within the fileeditor parameter...

CVE-2018-13789

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers...

Design/Logic Flaw

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers...

CVE-2018-13789

CVE-2018-13789 affects Descor Infocad FM prior to 3.1.0.0. An unauthenticated web service permits retrieval of files from the web server and from reachable SMB servers, indicating potential exposure of sensitive data via network access. The provided documents do not specify affected components be...

CVE-2018-13789

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers...

fm-oze.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-673838 Description| Value ---|--- Affected Website:| fm-oze.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID32722: Email Messages Distributing Malicious Software on May 8, 2018

Medium Alert ID: 57826 First Published: 2018 May 8 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32722 may contain the following files: Name | Size ...

seguro.maxima.fm XSS vulnerability

Open Bug Bounty ID: OBB-612694 Description| Value ---|--- Affected Website:| seguro.maxima.fm Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fm-m.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-608047 Description| Value ---|--- Affected Website:| fm-m.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

retro-fm-30plus.de XSS vulnerability

Open Bug Bounty ID: OBB-591663 Description| Value ---|--- Affected Website:| retro-fm-30plus.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

opa-fm and opa-ff competitive conditions loophole

opa-fm is an OPA architecture manager. opa-ff is an OPA architecture building tool. A competitive condition vulnerability exists in versions of opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197. No detailed vulnerability details are provided at this time...