EUVD-2020-19308

Malware in sbrugna...

CVE-2020-26772

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

CVE-2024-36691

Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...

CVE-2024-36691

PPGo_Jobs v2.8.0 is affected by CVE-2024-36691 due to insecure permissions in AdminController.AjaxSave(). Authenticated users can arbitrarily modify other users’ account information. The vulnerability arises from insufficient access control on the AjaxSave() endpoint. Affected component: AdminCon...

CVE-2024-36691

Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...

CVE-2020-26772

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

CVE-2020-26772

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

Command injection

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

CVE-2020-26772

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

CVE-2020-26772

CVE-2020-26772 affects PPGo_Jobs v2.8.0. A command injection vulnerability exists in the AjaxRun() function, enabling remote attackers to execute arbitrary code. CVSS metrics indicate a high likelihood of impact (C/H/I/A high; network access; no user interaction required). The vulnerability is ev...

PPGo_Job 操作系统命令注入漏洞

PPGoJobs is a lightweight timed task management system, go language development, super easy to deploy, low resource consumption, stable operation. An operating system command injection vulnerability exists in PPGoJobs v2.8.0, which allows remote attackers to execute arbitrary code via the AjaxRun...