33188 matches found
CVE-2022-43932
Improper neutralization of special elements in output used by a downstream component 'Injection' vulnerability in CGI component in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2022-43932
Improper neutralization of special elements in output used by a downstream component 'Injection' vulnerability in CGI component in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to read arbitrary files via unspecified vectors...
Dahua DSS Professional Packet Handler Arbitrary File Load
The vulnerability of the packet handler in the centralized video surveillance equipment management system of Dahua DSS Professional and DSS Express, as well as the DHI-DSS4004-S2/DHI-DSS7016D-S2/DHI-DSS7016DR-S2 video surveillance management servers, is related to the ability to load unlimited...
PT-2023-14405 · Synology · Synology Router Manager
Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.2.5-8227-6 Synology Router Manager versions prior to 1.3.1-9346-3 Description: The issue is related to improper neutralization of special elements in output used by a downstream component, also know...
Remote file inclusion
A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server...
Hughes Satellite Router Remote File Inclusion Cross Frame Scripting Vulnerability
Hughes Satellite Router contains a cross-frame scripting via remote file inclusion vulnerability that may potentially be exploited by malicious users to compromise an affected system. This vulnerability may allow an unauthenticated malicious user to misuse frames, include JS/HTML code and steal...
Hughes Satellite Router Remote File Inclusion Cross-Frame Scripting
Summary The HX200 is a high-performance satellite router designed to provide carrier-grade IP services using dynamically assigned high-bandwidth satellite IP connectivity. The HX200 satellite router provides flexible Quality of Service QoS features that can be tailored to the network applications...
FlatPress has an unspecified vulnerability
FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. flatpressblog/flatpress has a security vulnerability that stems from PHP remote file inclusion. No details of the vulnerability are currently available...
FlatPress < 1.3 Multiple Vulnerabilities
FlatPress is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-4606
PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...
Remote file inclusion
PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...
FlatPress security vulnerability
FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. flatpressblog/flatpress has a security vulnerability that stems from PHP remote file inclusion. No details of the vulnerability are currently available...
PT-2022-27725
Name of the Vulnerable Software and Affected Versions flatpress versions prior to 1.3 Description The issue concerns a PHP Remote File Inclusion in the GitHub repository flatpressblog/flatpress. Recommendations For versions prior to 1.3, update to version 1.3 or later to resolve the issue...
CVE-2022-4606
CVE-2022-4606 is a PHP Remote File Inclusion vulnerability impacting FlatPress (flatpress/flatpress) prior to version 1.3. Multiple connected sources corroborate the issue and describe an RFI leading to remote code execution via the uploader/media manager workflow (PoC demonstrated in Huntr entry...
CVE-2022-4606
PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2022-4606 PHP Remote File Inclusion in flatpressblog/flatpress
PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2022-4606 PHP Remote File Inclusion in flatpressblog/flatpress
PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2022-4606 PHP Remote File Inclusion in flatpressblog/flatpress
PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2022-4606: Improper Control of Filename for Include/Require Statement in PHP Program
PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...