CVE-2023-38942

Dango-Translator v4.5.5 is affected by a remote command execution (RCE) vulnerability through the component app/config/cloud_config.json. The CVE-2023-38942 entry indicates a CRITICAL severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with network access, no privileges, and no user interact...

CVE-2023-37679

CVE-2023-37679 / CVE-2023-43208 (NextGen HealthCare Mirth Connect) : Open-source data integration platform vulnerable to unauthenticated remote code execution due to improper/deserialization handling. Affects Mirth Connect versions prior to 4.4.1 (PoCs and advisories reference vulnerable ranges i...

CVE-2023-38941

django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...

SAP NetWeaver ABAP Arbitrary Command Execution

The vulnerability of the SAP NetWeaver ABAP software integration platform is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

RocketMQ NameServer Command Execution

The vulnerability of the NameServer component of the RocketMQ messaging platform is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of users remotely...

CVE-2023-38942

Dango-Translator v4.5.5 was discovered to contain a remote command execution RCE vulnerability via the component app/config/cloudconfig.json...

Eramba 3.19.1 Remote Command Execution

Trovent Security Advisory 2303-01 Authenticated remote code execution in Eramba Overview Advisory ID: TRSA-2303-01 Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2303-01 Affected product: Eramba Affected version: 3.19.1 Enterprise and Community...

com.imc.iview.utils.CUtils SQL Injection

The vulnerability of the com.imc.iview.utils.CUtils.checkSQLInjection function in the system for managing network devices and ports of Advantech iView is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute...

CVE-2023-38303

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting XSS attack to achieve Remote Command Execution RCE through the Users and Group's real name parameter...

CVE-2023-38303

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting XSS attack to achieve Remote Command Execution RCE through the Users and Group's real name parameter...

Cross site scripting

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting XSS attack to achieve Remote Command Execution RCE through the Users and Group's real name parameter...

CVE-2023-38303

CVE-2023-38303 affects Webmin 2.021. A stored XSS in the Users and Groups real name parameter can lead to Remote Command Execution (RCE). Impact is described as RCE via authenticated user input; CVSS v3.1 base score 5.4 (MEDIUM). Public details from multiple sources confirm the vulnerability in W...

PT-2023-4162 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin version 2.021 Description: The issue is related to the lack of protection of the web page structure in the Webmin control panel, allowing a remote attacker to conduct a cross-site scripting XSS attack. This can be exploited to achieve...

Webmin cross-site scripting vulnerabilities

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 2.021, which stems from a stored cross-site scripting XSS attack that can be exploited to achieve Remote Command Execution R...

Yunyecms SQL Injection Vulnerability

Yunyecms is a Php-based platform available for building branded websites for small and medium-sized businesses by the individual developer of Yunyecms. A SQL injection vulnerability exists in Yunyecms version 2.0.2, which originated from allowing remote attackers to run arbitrary SQL commands via...

GHSA-2H26-QFXM-R3PQ Code injection in PowerJob

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

CVE-2023-37754

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

CVE-2023-37754

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

CVE-2023-37754: Undefined Security Weakness

PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...

PT-2023-26094 · Powerjob · Powerjob

Name of the Vulnerable Software and Affected Versions: PowerJob version 4.3.3 Description: A remote command execution issue was discovered, allowing exploitation via the instanceId parameter at the "/instance/detail" API endpoint. Recommendations: For PowerJob version 4.3.3, consider restricting...