Lucene search
+L

184 matches found

Positive Technologies
Positive Technologies
•added 2026/03/10 12:00 a.m.•16 views

PT-2026-24293

Name of the Vulnerable Software and Affected Versions Windows System Image Manager affected versions not specified Description A flaw exists in the deserialization process within Windows System Image Manager. This issue could allow an authorized attacker to execute code locally. The vulnerability...

7.8CVSS7.6AI score0.01655EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/10 12:00 a.m.•6 views

CVE-2026-25166: Deserialization of Untrusted Data

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...

7.8CVSS7.4AI score0.01655EPSS
SaveExploits0References1
Chainguard
Chainguard
•added 2026/02/10 1:17 p.m.•50 views

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, amazon-k8s-cni, elvish, hydra-fips, pulumi-kubernetes-operator, chaos-mesh, croc, amass, paranoia, backup-restore-operator, zitadel, step-fips, kubernetes-csi-external-snapshotter, vault-csi-provider-fips, tigera-operator-fips,...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/24 9:15 p.m.•22 views

CVE-2021-47904

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server...

8.8CVSS6.3AI score0.00715EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/23 5:16 p.m.•21 views

CVE-2021-47904

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server...

8.8CVSS0.00715EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/01/23 4:47 p.m.•29 views

CVE-2021-47904

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server...

8.8CVSS6.3AI score0.00715EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2026/01/23 4:47 p.m.•32 views

CVE-2021-47904

CVE-2021-47904 affects PhreeBooks 5.2.3. An authenticated attacker can upload a malicious PHP web shell via the Image Manager’s unrestricted file-type uploads, enabling remote code execution on the server. Impact: remote code execution with high confidentiality, integrity, and availability implic...

8.8CVSS6.5AI score0.00715EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/01/23 4:47 p.m.•52 views

CVE-2021-47904 PhreeBooks 5.2.3 - Remote Code Execution

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server...

8.8CVSS0.00715EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/01/23 4:47 p.m.•14 views

CVE-2021-47904 PhreeBooks 5.2.3 - Remote Code Execution

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server...

8.8CVSS6.5AI score0.00715EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•22 views

PhreeBooks security vulnerabilities

PhreeBooks is a business resource planning and accounting software developed by the PhreeBooks company. Version 5.2.3 of PhreeBooks contains a security vulnerability, which stems from a file upload vulnerability in the Image Manager, potentially allowing remote code execution...

8.8CVSS6.1AI score0.00715EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/01/23 12:00 a.m.•31 views

PT-2026-4517

Name of the Vulnerable Software and Affected Versions PhreeBooks version 5.2.3 Description PhreeBooks version 5.2.3 has a flaw in the Image Manager related to file uploads. An authenticated attacker can upload a malicious PHP web shell due to unrestricted file type uploads, potentially leading to...

8.8CVSS6.4AI score0.00715EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•6 views

CVE-2021-47904: Unrestricted Upload of File with Dangerous Type

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server...

8.8CVSS6.5AI score0.00715EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:32 a.m.•24 views

CVE-2019-16684

An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the list or in the Edit page, the payload executes...

4.8CVSS5.7AI score0.01024EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•30 views

EUVD-2008-7174

Malware in sbrugna...

5.8CVSS6.4AI score0.01811EPSS
SaveExploits1References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•29 views

EUVD-2012-3384

Malware in sbrugna...

4.3CVSS5.8AI score0.09088EPSS
SaveExploits11References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-7244

Malware in sbrugna...

4.8CVSS5.7AI score0.01024EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-7243

Malware in sbrugna...

4.8CVSS5.4AI score0.01024EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/05/23 4:00 a.m.•23 views

CVE-2023-36217

Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of the image manager function...

9CVSS7.3AI score0.0156EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:35 a.m.•19 views

CVE-2019-16683

An issue was discovered in the image-manager in Xoops 2.5.10. When the breadcrumb showing the category name is hovered over while editing any image, a JavaScript payload executes...

4.8CVSS6.8AI score0.01024EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/08/03 6:15 p.m.•8 views

CVE-2023-36217

Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of the image manager function...

9CVSS7.8AI score0.0156EPSS
SaveExploits1References3
Rows per page
Query Builder