171160 matches found
Dahua Smart Park Management - Arbitrary File Upload
Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...
FUEL CMS 1.4.1 - Remote Code Execution
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. id: CVE-2018-16763 info: name: FUEL CMS 1.4.1 - Remote Code Execution author: pikpikcu severity: critical description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/...
Altenergy Power Control Software C1.2.5 - Remote Command Injection
Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...
Atlassian Jira Confluence - Cross-Site Scripting
Atlassian Jira Confluence before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4, and from version 7.9.0 before version 7.9.2, allows remote attackers to inject arbitrary HTML or JavaScript via a cross-site scripting vulnerability in the error messa...
GeoServer WPS - Server Side Request Forgery
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing Service WPS specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Server Side Request...
Citrix - Local File Inclusion
Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...
IncomCMS 2.0 - Arbitrary File Upload
IncomCMS 2.0 has a an insecure file upload vulnerability in modules/uploader/showcase/script.php. This allows unauthenticated attackers to upload files into the server. id: CVE-2020-29597 info: name: IncomCMS 2.0 - Arbitrary File Upload author: princechaddha severity: critical description: |...
Vendure - Arbitrary File Read
Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...
cPanel < 11.109.9999.116 - Cross-Site Scripting
An issue was discovered in cPanel before 11.109.9999.116. Cross Site Scripting can occur on the cpsrvd error page via an invalid webcall ID. id: CVE-2023-29489 info: name: cPanel 11.109.9999.116 - Cross-Site Scripting author: DhiyaneshDk,0xKayala severity: medium description: | An issue was...
Mongo-Express - Remote Code Execution
Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...
CVE-2025-32433
CVE-2025-32433 Erlang/OTP SSH 서버의 치명적인 취약점으로 인해 인증되지 않은 원격 코드 실행RCE이 가능합니다. 이 결함은 SSH 프로토콜 메시지 처리 메커니즘에 존재하며, 공격자가 인증 자격 증명 없이 임의의 명령을 실행할 수 있게 합니다. 영향 공격자가 잠재적으로 다음을 수행할 수 있는 치명적인 심각도 취약점입니다: - 브라우저의 샌드박스 보호 우회 - 임의 코드 실행 - 시스템 무결성 손상 - 시스템 리소스에 대한 무단 액세스. 이 취약점은 특히 Windows의 Firefox를 대상으로 하며 실제...
ROOT-OS-DEBIAN-12-CVE-2026-43715 CVE-2026-43715 in webkit2gtk - Patched by Root
Root has patched CVE-2026-43715 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28847 CVE-2026-28847 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28847 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
How-to-Patch-CVE-2025-32709
CVE-2025-32709 취약점 패치 방법 CVE-2025-32709에 대한 실제 패치 워크플로우입니다. 핫픽스 설치부터 SIEM 알림 검증까지 — 이 저장소는 스크린샷, 명령어 및 탐지 로직과 함께 모든 단계를 문서화합니다. Windows 10 Pro 엔드포인트에서 CVE-2025-32709가 높은 심각도 취약점으로 플래그된 Wazuh 취약점 탐지 대시보드의 스크린샷. 에이전트 window10 004는 하나의 높은 심각도 문제를 보고하고 있으며, 시스템이 현재 노출 상태임을 확인합니다. 이 이미지는 패치 전 기준선 역할을 ...
ROOT-APP-NPM-CVE-2026-18446 CVE-2026-18446 in fast-uri - Patched by Root
Root has patched CVE-2026-18446 in the fast-uri package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-6322 CVE-2026-6322 in fast-uri - Patched by Root
Root has patched CVE-2026-6322 in the fast-uri package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-59880 CVE-2026-59880 in immutable - Patched by Root
Root has patched CVE-2026-59880 in the immutable package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-59879 CVE-2026-59879 in immutable - Patched by Root
Root has patched CVE-2026-59879 in the immutable package for Root:npm. Multiple fixed versions available...