1256 matches found
ChanCMS SQL注入漏洞
ChanCMS is a content management system. A SQL injection vulnerability exists in ChanCMS 3.3.2 and earlier versions, which originates from the lack of validation of the parameter ID in the file /cms/model/hasUse for externally entered SQL statements. An attacker can exploit this vulnerability to...
Hikvision iSecure Center 安全漏洞
Hikvision iSecure Center is an integrated security management platform from Hikvision China. A security vulnerability exists in Hikvision iSecure Center that stems from insufficient parameter validation, which could lead to a command injection attack...
i40e: add validation for ring_len param
...
CVE-2025-8594
The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRF attack...
BESTWOND Intelligent Flow Control Router 安全漏洞
BESTWOND Intelligent Flow Control Router is an intelligent flow control router from China's BESTWOND. A security vulnerability exists in the BESTWOND Intelligent Flow Control Router that stems from not properly validating the path parameter and displaying it back to the shell environment, which...
EUVD-2025-34142
The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRF attack...
CVE-2025-8594
The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRF attack...
CVE-2025-8594 Pz-LinkCard < 2.5.7 - Contributor+ SSRF
The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRF attack...
PT-2025-41851
Name of the Vulnerable Software and Affected Versions Pz-LinkCard WordPress plugin versions prior to 2.5.7 Description The software does not properly validate a parameter before using it in a request, potentially allowing Server-Side Request Forgery SSRF attacks. Users with Contributor privileges...
Linux Distros Unpatched Vulnerability : CVE-2025-39909
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/lrusort: avoid divide-by-zero in damonlrusortapplyparameters Patch series mm/damon: avoid divide-by-zero in DAMON module's parameters application...
CVE-2025-40889
CVE-2025-40889 involves a path traversal in Nozomi Networks Guardian/CMC Time Machine functionality caused by inadequate validation of two input parameters. An authenticated user with limited privileges can craft requests to potentially alter file structures/content in the /data directory or affe...
EUVD-2017-17172
Malware in sbrugna...
EUVD-2020-3558
Malware in sbrugna...
EUVD-2019-5303
Malware in sbrugna...
EUVD-2014-2220
Malware in sbrugna...
EUVD-2017-3989
Malware in sbrugna...
EUVD-2017-17148
Malware in sbrugna...
EUVD-2007-4953
Malware in sbrugna...