15886 matches found
CVE-2024-7036
Open WebUI vulnerability CVE-2024-7036 is described in connected advisories as Open WebUI 0.3.8 containing an uncontrolled resource consumption flaw. An unauthenticated attacker can sign up with excessively large text in the name field, causing the Admin panel to become unresponsive and blocking ...
CVE-2024-9699
A vulnerability in the file upload functionality of the FlatPress CMS admin panel version latest allows an attacker to upload a file with a JavaScript payload disguised as a filename. This can lead to a Cross-Site Scripting XSS attack if the uploaded file is accessed by other users. The issue is...
CVE-2024-6838
In mlflow/mlflow version v2.13.2, a vulnerability exists that allows the creation or renaming of an experiment with a large number of integers in its name due to the lack of a limit on the experiment name. This can cause the MLflow UI panel to become unresponsive, leading to a potential denial of...
Open WebUI Resource Management Error Vulnerability
Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A resource management error vulnerability exists in Open WebUI version v0.3.8, which stems from the use of an overly large name field during registration by an unauthorized user, which may caus...
PT-2025-54640
Уязвимость административной панели платформы управления мобильными устройствами Telpo MDM связана с подделкой межсайтовых запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, осуществить CSRF-атаку...
PT-2025-12290
Name of the Vulnerable Software and Affected Versions FlatPress CMS versions prior to 1.4.dev Description A issue in the file upload functionality of the admin panel allows an attacker to upload a file with a JavaScript payload disguised as a filename, potentially leading to a Cross-Site Scriptin...
PT-2025-12176
Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.8 Description A vulnerability allows an unauthenticated attacker to sign up with excessively large text in the name field, causing the Admin panel to become unresponsive. This prevents administrators from...
CVE-2024-9699: Improper Neutralization of Input During Web Page Generation
A vulnerability in the file upload functionality of the FlatPress CMS admin panel version latest allows an attacker to upload a file with a JavaScript payload disguised as a filename. This can lead to a Cross-Site Scripting XSS attack if the uploaded file is accessed by other users. The issue is...
FluxBB 1.5.11 - Stored Cross-Site Scripting (XSS)
Exploit Title: FluxBB 1.5.11 Stored xss Date: 3/8/2025 Exploit Author: Chokri Hammedi Vendor Homepage: www.fluxbb.org Software Link: https://www.softaculous.com/apps/forums/FluxBB Version: FluxBB 1.5.11 Tested on: Windows XP 1. login to admin panel 2. go to /adminforums.php 3. click on "add forum...
CISA Releases Seven Industrial Control Systems Advisories
CISA released seven Industrial Control Systems ICS advisories on March 18, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-077-01 Schneider Electric EcoStruxure Power Automation System User Interface EPAS-UI...
CVE-2025-25872
An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...
CVE-2025-25873
Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function...
CVE-2025-25871
An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...
CVE-2025-25873
Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function...
CVE-2025-25871
An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...
CVE-2025-25872
An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...
CVE-2025-25871
An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...
