7 matches found
EUVD-2018-10476
Malware in sbrugna...
EUVD-2024-46629
Malicious code in bioql PyPI...
EUVD-2024-46631
Malicious code in bioql PyPI...
EUVD-2024-46630
Malicious code in bioql PyPI...
CVE-2024-5407
A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure...
PT-2024-36022 · Rhinos · Rhinos
Name of the Vulnerable Software and Affected Versions: RhinOS versions 3.0-1190 Description: The issue allows a remote attacker to steal user session details by submitting a specially crafted URL, exploiting an XSS vulnerability through the search parameter of the "/portal/search.htm" API endpoin...
PT-2024-36025 · Rhinos +1 · Rhinos +1
Name of the Vulnerable Software and Affected Versions: RhinOS versions 3.0-1190 Description: The issue allows for an XSS attack via the tamper parameter in the "/admin/lib/phpthumb/phpthumb.php" API endpoint. An attacker could create a malicious URL and send it to a victim to obtain their session...