CVE-2023-2112: Improper Access Control

Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0...

M-Files 资源管理错误漏洞

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A resource management error vulnerability exists in versions prior to M-Files 23.4.12528.1 that stems from uncontrolled memory consumption of scheduled jobs, which can be exploited by an attacker to cause a...

M-Files 资源管理错误漏洞

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files versions prior to 23.4.12528.1 that stems from uncontrolled memory consumption leading to a denial of service in the server...

CVE-2023-2057: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...

CVE-2023-26847

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates...

CVE-2023-26846: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

CVE-2023-26846

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

Siemens SCALANCE M-800 & S615 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute (CVE-2016-7090)

The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. This...

PT-2023-20822

Name of the Vulnerable Software and Affected Versions OpenCATS version 0.9.7 Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at "opencats/index.php?m=candidates". This enables...

m-link.cz Cross Site Scripting vulnerability OBB-3252952

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-0382

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0382

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0382 Uncontrolled Resource Consumption in M-Files Server

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0382 Uncontrolled Resource Consumption in M-Files Server

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0382

CVE-2023-0382 affects M-Files Server prior to version 23.4.12528.1, where user-controlled operations can cause uncontrolled memory consumption leading to Denial of Service. Exploitation details are not provided in the documents beyond this impact; no active exploit data is cited. Remediation: upd...

M-Files Server 资源管理错误漏洞

M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in M-Files Server versions prior to 23.4.12528.1 that stems from uncontrolled memory consumption. An attacker exploiting this vulnerability could cause a denial of service on the system...

PT-2023-16231 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files Server versions prior to 23.4.12528.1 Description: The issue allows user-controlled operations to cause Denial of Service due to uncontrolled memory consumption. Recommendations: For versions prior to 23.4.12528.1, update to version...

PT-2023-35755 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

CVE-2023-0382: Allocation of Resources Without Limits or Throttling

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

Green Packet OH736 命令注入漏洞

The Green Packet OH736 is a router from Green Packet USA. A security vulnerability exists in the WR-1200 Indoor Unit, OT-235 M-IDU-1.6.0.3V1.1 version, and MH-46360-2.0.3-R5-GP version of the Green Packet OH736. By exploiting this vulnerability, an attacker can completely take over root privilege...