44 matches found
CVE-2018-7600
IMPORTANT: Is provided only for educational or information purposes. Protect rules for ModSecurity by fuzzylogic Protect rules for ModRewrite .htaccess FOR MEDIA: Please do not post a link to this repository in your articles, without specifying how to protect against an attack recommend updating...
CVE-2026-108829
A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configuration. The manipulation of the argument configuration results in sql injection. The attack may be launched remotely. The...
EUVD-2026-97352
A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configuration. The manipulation of the argument configuration results in sql injection. The attack may be launched remotely. The...
CVE-2026-108829
Zen Cart versions up to 2.2.2 are vulnerable to a remote SQL injection flaw within the Module Configuration component. The vulnerability exists in the admin/modules.php file, where the manipulation of the configuration argument allows for unauthorized database interaction. An exploit has been pub...
CVE-2026-108829 Zen Cart Module Configuration modules.php sql injection
A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configuration. The manipulation of the argument configuration results in sql injection. The attack may be launched remotely. The...
CVE-2026-108829 Zen Cart Module Configuration modules.php sql injection
A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configuration. The manipulation of the argument configuration results in sql injection. The attack may be launched remotely. The...
PT-2026-110542
Name of the Vulnerable Software and Affected Versions Zen Cart versions prior to 2.2.2 Description A security flaw exists in the Module Configuration component within the admin/modules.php file. Remote attackers can perform SQL injection, a technique used to manipulate database queries, by...
CVE-2026-108829: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configuration. The manipulation of the argument configuration results in sql injection. The attack may be launched remotely. The...
CVE-2026-9634: Incorrect Default Permissions
A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loca...
CVE-2026-9633: Incorrect Default Permissions
A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loc...
Cross-site Request Forgery (CSRF)
Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the admin.config.php process. An attacker can modify arbitrary core, module, or plugin configuration options by tricking an authenticated administrator into visiting a malicious page, resulting in...
AlchemyCMS - Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper
Summary A vulnerability was discovered during a manual security audit of the AlchemyCMS source code. The application uses the Ruby eval function to dynamically execute a string provided by the resourcehandler.enginename attribute in Alchemy::ResourcesHelperresourceurlproxy. Details The...
CVE-2022-38993
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability...
EUVD-2016-1750
Malware in sbrugna...
EUVD-2001-1162
Malware in sbrugna...
EUVD-2025-27769
Malicious code in bioql PyPI...
CVE-2025-56588
Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...
CVE-2025-56588
Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...
CVE-2025-56588
Dolibarr ERP & CRM version v21.0.1 is vulnerable to Remote Code Execution (RCE) . The flaw exists within the User module configuration due to a security issue in the computed field parameter . While the vulnerability's impact is high, there is currently no information regarding a newer version or...