GHSA-6278-2Q4M-CMF3 ZK Framework vulnerable to malicious POST

ZK Framework version 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader...

jfinal cms 跨站脚本漏洞

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl , database with mysql , front-end bootstrap framework . A security vulnerability exists in jfinal cms version v5.1.0, which stems from...

CVE-2022-37223

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/role/list...

CVE-2022-37199

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...

jfinal cms SQL注入漏洞

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , the template engine with beetl , database with mysql , front-end bootstrap framework . jfinal cms 5.1.0 version of a security vulnerability , the vulnerability...

PT-2022-19266 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel version 5.1 Description: A critical issue was found, affecting an unknown function, which leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public. Recommendations: For Laravel versio...

CVE-2022-25851

creationtimestamp| type| source ---|---|--- 2022-08-10 17:30:55+00:00| seen| https://t.me/cibsecurity/44226...

CVE-2022-34928

JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user...

PT-2022-22442 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel version 5.1 Description: The issue is related to a remote code execution vulnerability in the ChanceGenerator component via the call function. This allows for potential exploitation. Recommendations: For Laravel version 5.1, at the...

Bolt CMS 输入验证错误漏洞

Bolt CMS is an open source PHP-based content management system for the BOLT community. An input validation error vulnerability exists in Bolt CMS version 5.1.7, which stems from the folder name parameter being found to have incorrect input validation, allowing an attacker to perform directory...

CVE-2022-33095

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist...

CVE-2022-33751

creationtimestamp| type| source ---|---|--- 2022-06-17 02:22:17+00:00| seen| https://t.me/cibsecurity/44711...

PT-2022-3472 · Canbrass · Canbrass

Name of the Vulnerable Software and Affected Versions: CanBRASS versions prior to V7.5.1 Description: A memory buffer vulnerability exists that could cause remote code execution when a command which exploits this vulnerability is utilized. This issue is related to improper restriction of operatio...

CVE-2022-29648

A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...

Cross-site Request Forgery (CSRF)

Overview UmbracoCms is a package that installs Umbraco Cms in your Visual Studio ASP.NET project Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF which allows an attacker to perform arbitrary web requests with the identity of the victim, e.g. in order to...

Telecommunication Software SAMwin Contact Center Suite SQL注入漏洞

Telecommunication Software SAMwin Contact Center Suite is a highly versatile and flexible contact center software solution from Telecommunication Software. A security vulnerability exists in Telecommunication Software SAMwin Contact Center Suite version 5.1 that stems from an architectural issue...

CVE-2022-30551

creationtimestamp| type| source ---|---|--- 2022-05-20 16:36:40+00:00| seen| https://t.me/cibsecurity/43049...

CVE-2022-27588

We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later...

CVE-2022-28708

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server, an undisclosed DNS response can cause the Traffic Management Microkernel TMM process to terminate. Note:...

CVE-2022-27662

On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execute template language-specific instructions in the context...