7173 matches found
GNUBOARD5 加密问题漏洞
GNUBOARD5 is a PHP and MySQL based web forum system. GNUBOARD5 5.5.5 and prior versions suffer from a cryptographic issue vulnerability that stems from the application's use of weak encryption algorithms resulting in the exposure of password information. An unauthorized attacker could exploit thi...
CVE-2022-26982
SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute arbitrary code by inserting a vulnerable php code because the themes can be modified by an administrator. NOTE: the vendor's position is that administrators are intended to have the ability to modify theme...
SimpleMachinesForum 代码注入漏洞
SimpleMachinesForum is an open source forum software. A code injection vulnerability exists in SimpleMachinesForum version 2.1.1 and earlier versions, which allows an authenticated, remote attacker to execute arbitrary code by inserting vulnerable php code...
PT-2022-18161 · Unknown · Simple Machines Forum
Name of the Vulnerable Software and Affected Versions: SimpleMachinesForum versions 2.1.1 and earlier Description: The issue allows remote authenticated administrators to execute arbitrary code by inserting vulnerable PHP code because themes can be modified by an administrator. The vendor's...
Joomla! information disclosure vulnerability (CNVD-2022-64097)
Joomla! is a set of forum components used in the Joomla! content management system. An information disclosure vulnerability exists in versions 3.0.0 through 3.10.6 and 4.0.0 through 4.1.0, which stems from an error caused by uploading a file name that is too long. The error displays a screen with...
Joomla! Cross-site scripting vulnerability (CNVD-2022-64104)
Joomla! is a set of forum components used in the Joomla! content management system. versions 3.7.0 to 3.10.6 have a cross-site scripting vulnerability, which originates from the comfields class that does not sufficiently clean up and escape data provided to the user, and can be used by attackers ...
Joomla! input validation error vulnerability (CNVD-2022-64098)
Joomla! is a set of forum components used in the Joomla! content management system. versions 2.5.0 to 3.10.6 and 4.0.0 to 4.1.0 contain an input validation error vulnerability that can be exploited by attackers to invalidate the check of whether the redirected url is internal, possibly leading to...
Bulletin Board System File Upload Vulnerability (CNVD-2022-63667)
Bulletin Board System is a web forum. bulletin Board System is vulnerable to file upload, which can be exploited by attackers to execute arbitrary code...
Bulletin Board System File Upload Vulnerability (CNVD-2022-63666)
Bulletin Board System is a web forum. bulletin Board System is vulnerable to file upload, which can be exploited by attackers to execute arbitrary code...
Bulletin Board System File Upload Vulnerability
Bulletin Board System is a web forum. bulletin Board System is vulnerable to file upload, which can be exploited by attackers to execute arbitrary code...
Bulletin Board System File Upload Vulnerability (CNVD-2022-63665)
Bulletin Board System is a web forum. bulletin Board System is vulnerable to file upload, which can be exploited by attackers to execute arbitrary code...
CVE-2021-43103
A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
diyhi bbs 代码问题漏洞
Bulletin Board System is a web forum. bulletin Board System is vulnerable to file upload, which can be exploited by attackers to execute arbitrary code...
diyhi bbs 代码问题漏洞
Bulletin Board System is a web forum. bulletin Board System is vulnerable to file upload, which can be exploited by attackers to execute arbitrary code...
diyhi bbs 代码问题漏洞
Bulletin Board System is a web forum. bulletin Board System is vulnerable to file upload, which can be exploited by attackers to execute arbitrary code...
Estonian Tied to 13 Ransomware Attacks Gets 66 Months in Prison
An Estonian man was sentenced today to more than five years in a U.S. prison for his role in at least 13 ransomware attacks that caused losses of approximately $53 million. Prosecutors say the accused also enjoyed a lengthy career of "cashing out" access to hacked bank accounts worldwide. Maksim...
23-Year-Old Russian Hacker Wanted by FBI for Running Marketplace of Stolen Logins
A 23-year-old Russian national has been indicted in the U.S. and added to the Federal Bureau of Investigation's FBI Cyber Most Wanted List for his alleged role as the administrator of Marketplace A, a cyber crime forum that sold stolen login credentials, personal information, and credit card data...
Moodle 3.8.x < 3.8.9, 3.9.x < 3.9.7, 3.10.x < 3.10.4 Multiple Vulnerabilities (MSA-21-0012, MSA-21-0018)
Moodle is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
