PT-2022-11151

Name of the Vulnerable Software and Affected Versions Samba server affected versions not specified Description The issue is related to a buffer overflow vulnerability due to a boundary error in the Samba server, specifically within the file management module in smartphones. Successful exploitatio...

CVE-2021-40029: Buffer Copy without Checking Size of Input

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability...

PT-2022-11157

Name of the Vulnerable Software and Affected Versions Samba server affected versions not specified Description The issue is related to a buffer overflow due to a boundary error in the Samba server, specifically within the file management module in smartphones. This can lead to instability in...

The vulnerability of the integrated management module (IMM) of IBM System x3550 M3 and IBM System x3650 M3 allows a hacker to execute arbitrary operating system commands.

The vulnerability of the Integrated Management Module IMM of IBM System x3550 M3 and IBM System x3650 M3 exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

Lenovo Fan Power Controller2和Lenovo System Management Module 授权问题漏洞

Lenovo Fan Power Controller2 Lenovo Fpc2 and Lenovo System Management Module Lenovo Smm are both products of the Chinese company Lenovo.Lenovo Fan Power Controller2 is a fan power controller firmware. Lenovo System Management Module is a system management module firmware. A security vulnerability...

Lenovo Fan Power Controller2 授权问题漏洞

Lenovo Fan Power Controller2 Lenovo Fpc2 is a fan power controller firmware from Lenovo China. A security vulnerability exists in the internal services of the Lenovo Fan Power Controller2 FPC2 and Lenovo System Management Module SMM firmware that could allow an unauthenticated attacker to execute...

IBM System x servers operating system command injection vulnerability

IBM System x servers are a server from International Business Machines Corporation IBM, and an operating system command injection vulnerability exists in the Integrated Management Module IMM of IBM System x 3550 M3 and IBM System x 3650 M3 servers, which could be exploited by an attacker to execu...

CVE-2021-3723

A command injection vulnerability was reported in the Integrated Management Module IMM of legacy IBM System x 3550 M3 and IBM System x 3650 M3 servers that could allow the execution of operating system commands over an authenticated SSH or Telnet session...

CVE-2021-3723: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability was reported in the Integrated Management Module IMM of legacy IBM System x 3550 M3 and IBM System x 3650 M3 servers that could allow the execution of operating system commands over an authenticated SSH or Telnet session...

IBM System x servers 操作系统命令注入漏洞

IBM System x servers are a server from International Business Machines Corporation IBM, and an operating system command injection vulnerability exists in the Integrated Management Module IMM of IBM System x 3550 M3 and IBM System x 3650 M3 servers, which could be exploited by an attacker to execu...

CVE-2021-43281

MyBB before 1.8.29 allows Remote Code Injection by an admin with the "Can manage settings?" permission. The Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type "php" with PHP code, executed o...

CVE-2021-43281: Improper Control of Generation of Code

MyBB before 1.8.29 allows Remote Code Injection by an admin with the "Can manage settings?" permission. The Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type "php" with PHP code, executed o...

LaraCms Cross-Site Scripting Vulnerability

LaraCms is a modern content management system in China. version 1.0.1 of LaraCMS contains a cross-site scripting vulnerability, which can be exploited by attackers to execute arbitrary web scripts or HTML via specially crafted loads in the page management module...

CVE-2020-20131

LaraCMS v1.0.1 contains a stored cross-site scripting XSS vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module...

CVE-2020-20131

LaraCMS v1.0.1 contains a stored cross-site scripting XSS vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module...

PT-2021-10437

Name of the Vulnerable Software and Affected Versions: LaraCMS version 1.0.1 Description: The issue is a stored cross-site scripting XSS vulnerability that allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module. This enables attackers to...

LaraCms 跨站脚本漏洞

LaraCms is a modern content management system in China. version 1.0.1 of LaraCMS contains a cross-site scripting vulnerability, which can be exploited by attackers to execute arbitrary web scripts or HTML via specially crafted loads in the page management module...

CVE-2020-20131: Improper Neutralization of Input During Web Page Generation

LaraCMS v1.0.1 contains a stored cross-site scripting XSS vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module...

PT-2021-5272

Name of the Vulnerable Software and Affected Versions IBM System x 3550 M3 affected versions not specified IBM System x 3650 M3 affected versions not specified Description A command injection issue was found in the Integrated Management Module IMM that could allow the execution of operating syste...

CVE-2020-21082: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...