Lucene search
+L

142 matches found

Kitploit
Kitploit
added 2026/08/25 5:40 a.m.1 views

cve-2024-37765

설명 MachForm 버전 19까지는 사용자 계정 설정 페이지에서 인증된 블라인드 SQL 인젝션의 영향을 받습니다. SQL 인젝션 공격은 클라이언트 애플리케이션의 입력 데이터 필드를 통해 SQL 쿼리를 삽입하는 것으로 구성됩니다. 이러한 공격은 데이터베이스에 접근하여 기존 데이터의 유출, 수정 또는 삭제로 이어질 수 있습니다. 블라인드 SQL 인젝션은 공격자가 전체 쿼리 결과를 받지 못하고 참 또는 거짓 질문만 할 수 있는 특정 유형의 공격입니다. 이는 sleep 함수를 사용하여 데이터베이스 응답에 지연을 강제하거나 오류 조건...

8.8CVSS5.7AI score0.00831EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 4:15 a.m.2 views

cve-2024-37763

설명 MachForm 버전 19까지는 인증되지 않은 저장형 크로스 사이트 스크립팅XSS의 영향을 받으며, 이는 컴파일된 양식 결과를 볼 수 있는 유효한 세션을 가진 사용자에게 영향을 미칩니다. 대상 웹 애플리케이션에서 텍스트 서명이 활성화된 양식을 사용할 때, 취약한 리소스에 대한 요청이 XSS 공격에 취약한 것으로 확인되었습니다. 취약한 URL 내 POST 요청 본문의 매개변수는 위생 처리가 부족하여, 악성 페이로드가 삽입되고 피해자 브라우저에서 JavaScript 코드가 실행될 수 있습니다. 위험 심각도: 중간 CVSS...

5.4CVSS0.00672EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 4:15 a.m.2 views

cve-2024-37764

Описание MachForm до версии 19 подвержен аутентифицированному сохраненному межсайтовому скриптингу XSS. В целевом веб-приложении запрос к уязвимому ресурсу был признан подверженным XSS-атаке. Параметры POST-запроса в теле уязвимого URL-адреса не проходят санитацию, что позволяет внедрить...

5.4CVSS4.9AI score0.00588EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 4:15 a.m.1 views

cve-2024-37762

Описание MachForm до версии 21 подвержен аутентифицированной неограниченной загрузке файлов, что приводит к удаленному выполнению кода. Приложение предоставляет возможность создания формы с функцией загрузки файлов. Хотя по умолчанию принимаемые файлы ограничены общим безопасным набором, создател...

9.9CVSS5.9AI score0.01457EPSS
SaveExploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2013-4794

Malware in sbrugna...

4.3CVSS6.4AI score0.03889EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-18167

Malware in sbrugna...

9.8CVSS9.3AI score0.04911EPSS
SaveExploits5References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2013-4792

Malware in sbrugna...

7.5CVSS6.4AI score0.0354EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2013-4793

Malware in sbrugna...

6.8CVSS6.4AI score0.05453EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2021-7559

Malicious code in bioql PyPI...

8.8CVSS8.8AI score0.00508EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2021-7558

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00722EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.7 views

EUVD-2025-3837

Malicious code in bioql PyPI...

7.1CVSS8.9AI score0.00182EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2021-7561

Malicious code in bioql PyPI...

8.1CVSS8.1AI score0.02151EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2021-7562

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00744EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:50 a.m.13 views

CVE-2024-37763

MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...

5.4CVSS6.1AI score0.00672EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:50 a.m.16 views

CVE-2024-37764

MachForm up to version 19 is affected by an authenticated stored cross-site scripting...

5.4CVSS6.4AI score0.00588EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:50 a.m.14 views

CVE-2024-37762

MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...

9.9CVSS7.4AI score0.01457EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:50 a.m.14 views

CVE-2024-37765

Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page...

8.8CVSS7.7AI score0.00831EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:06 p.m.11 views

CVE-2021-20105

Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...

6.1CVSS6.8AI score0.00744EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:06 p.m.14 views

CVE-2021-20103

Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attachments uploaded with forms through upload.php...

6.1CVSS6AI score0.00685EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:06 p.m.14 views

CVE-2021-20101

Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content...

6.1CVSS7AI score0.00722EPSS
SaveExploits0References1
Rows per page
Query Builder