111531 matches found
CVE-2024-38639 QTS
An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...
The vulnerability in the Open WebUI web interface, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.
The vulnerability of the Open WebUI web interface related to insufficient validation of requests on the server side when processing the AIOHTTPCLIENTALLOWREDIRECTS parameter. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...
The vulnerability of the action_set_systemSettings() function in the SettingHandler component of the GPON-terminal software Tenda G103 allows a intruder to execute arbitrary commands.
The vulnerability of the actionsetsystemSettings function in the SettingHandler component of the GPON-terminal software framework Tenda G103 is related to the lack of measures to sanitize input data during the processing of the lanIp parameter. Exploiting this vulnerability could allow a remote...
The vulnerability of the R7WebsSecurityHandler() function in the Tenda i6 Wi-Fi router software allows a hacker to bypass the catalog.
The vulnerability of function R7WebsSecurityHandler in the Tenda i6 Wi-Fi router software is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to bypass the directory structure...
ROS-20260918-73-0104
The vulnerability of the f2fswriteendio function in the fs/f2fs/data.c module of the F2FS file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...
ROS-20260918-73-0015
The vulnerability of the drivers/block/rnbd/rnbd-srv.c component in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...
The vulnerability of the ColdFusion software platform, related to the failure to eliminate instructions in dynamically executed code, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Twig CMS’ security policy, October CMS, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Twig CMS’ security system, October CMS, is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260918-73-0069
The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Rsync file transfer and synchronization utility lies in the lack of measures to neutralize specific elements, allowing a perpetrator to execute arbitrary commands.
The vulnerability of the Rsync file transfer and synchronization utility is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
EulerOS Virtualization 2.12.0 : wget (EulerOS-SA-2026-3680)
According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within...
ROS-20260918-73-0056
The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2020-8958
针对 CVE-2020-8958 的概念验证脚本，使用 Python 编写。如果成功，脚本将返回 /etc/passwd 的内容。 CVE-2020-8958 广州 1GE ONU V2801RW 1.9.1-181203 至 2.9.0-181024 以及 V2804RGW 1.9.1-181203 至 2.9.0-181024 设备允许远程攻击者通过在 boaform/admin/formPing 的目标 IP 地址字段中使用 shell 元字符来执行任意操作系统命令。 要求 Python 3.X bs4 使用方法 python poc.py...
CVE-2026-93385
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-93385
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-93385
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-82489
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-93384
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
