CVE-2021-3849: Authentication Bypass Using an Alternate Path or Channel

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 FPC2 and Lenovo System Management Module SMM firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected...

CVE-2022-28445

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...

CVE-2022-28445

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...

CVE-2022-28445

CVE-2022-28445 affects KiteCMS v1.1.1 and describes an arbitrary file read vulnerability in the background management module. The issue exposes partial confidentiality (per CVSS v3.1: HIGH confidentiality impact, network attack vector, low attack complexity, no user interaction) but no explicit e...

CVE-2022-28445

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...

PT-2022-19034

Name of the Vulnerable Software and Affected Versions KiteCMS version 1.1.1 Description The issue is related to an arbitrary file read vulnerability. It affects the background management module, allowing unauthorized access to files. Recommendations For KiteCMS version 1.1.1, consider restricting...

CVE-2022-28445: Files or Directories Accessible to External Parties

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...

CVE-2022-23880

An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file...

Design/Logic Flaw

MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type php with PHP code, executed on on Change Settings pages. This resul...

CVE-2022-24734 Remote code execution in mybb

MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type php with PHP code, executed on on Change Settings pages. This resul...

CVE-2022-24734

MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type "php" with PHP code, executed on on Change Settings pages. This...

CVE-2022-24734: Improper Control of Generation of Code

MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type php with PHP code, executed on on Change Settings pages. This resul...

CVE-2021-46063

MCMS v5.2.5 was discovered to contain a Server Side Template Injection SSTI vulnerability via the Template Management module...

CVE-2021-37115: Undefined Security Weakness

There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-46030

There is a Cross Site Scripting attack XSS vulnerability in JavaQuarkBBS = v2. By entering specific statements into the background tag management module, the attack statement will be stored in the database, and the next victim will be attacked when he accesses the tag module...

CVE-2021-46030

The CVE-2021-46030 entry concerns a Cross-Site Scripting (XSS) vulnerability in JavaQuarkBBS versions up to v2. The root cause, as described across multiple connected documents, is insufficient data validation/filtering of user-supplied input in the background tag management module, allowing stor...

CVE-2021-46030

There is a Cross Site Scripting attack XSS vulnerability in JavaQuarkBBS = v2. By entering specific statements into the background tag management module, the attack statement will be stored in the database, and the next victim will be attacked when he accesses the tag module...

PT-2022-12514

Name of the Vulnerable Software and Affected Versions JavaQuarkBBS versions prior to v3 Description The issue is related to a Cross Site Scripting attack XSS that occurs when specific statements are entered into the background tag management module. These statements are stored in the database and...

CVE-2021-46030: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting attack XSS vulnerability in JavaQuarkBBS = v2. By entering specific statements into the background tag management module, the attack statement will be stored in the database, and the next victim will be attacked when he accesses the tag module...

CVE-2021-40035: Buffer Copy without Checking Size of Input

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability...