295 matches found
CVE-2025-26238
In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...
CVE-2025-26238
D-Link DI-8100G firmware version 17.12.20A1 is affected by a vulnerability in the msp info endpoint , where the flag parameter can be exploited to achieve arbitrary code execution , allowing an attacker to run unauthorized commands on the device. The attack vector is adjacent network , requires n...
CVE-2026-10559
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is an unknown function of the file /index.php. Executing a manipulation of the argument page can lead to file inclusion. The attack may be performed from remote. The exploit has been published and may be us...
CVE-2019-25492
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter. Attackers can send GET requests to the admin/getcmsdata.php endpoint with malicious 'pt' values to extract sensitive database...
CVE-2018-12250
An issue was discovered in Elite CMS Pro 2.01. In /admin/addsidebar.php, the ?page= parameter is vulnerable to SQL injection...
CVE-2018-6354
templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the next parameter...
CVE-2022-35560
A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.94122 version, which can be exploited by attackers to cause a denial of service DoS via the index parameter...
CVE-2019-11399
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the getset.ccp lanHostCfgHostName1.1.1.0.0 parameter...
CVE-2020-12058
Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code. The malicious code can be injected as follows: the page parameter to catalog/admin/orderstatus.php, catalog/admin/taxrates.php, catalog/admin/languages.php,...
CVE-2020-23978
SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"...
CVE-2020-10221
lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter...
Vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, Data Domain OS operating system—related to the implementation or modification of arguments that allow attackers to trigger service interruptions.
The vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and Data Domain OS operating system are...
EUVD-2008-2281
Malware in sbrugna...
EUVD-2007-2627
Malware in sbrugna...
EUVD-2015-7771
Malware in sbrugna...
EUVD-2020-17318
Malware in sbrugna...
EUVD-2015-2356
Malware in sbrugna...
EUVD-2018-2050
Malware in sbrugna...