33 matches found
EUVD-2024-54226
Malicious code in bioql PyPI...
EUVD-2024-54225
Malicious code in bioql PyPI...
EUVD-2024-54228
Malicious code in bioql PyPI...
EUVD-2024-54227
Malicious code in bioql PyPI...
CVE-2024-50707
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request...
CVE-2024-50705
Unauthenticated reflected cross-site scripting XSS vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter...
CVE-2024-50706
Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries on the backend database...
CVE-2024-50704
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request...
CVE-2024-50707
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request...
CVE-2024-50704
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request...
CVE-2024-50707
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request...
CVE-2024-50704
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request...
CVE-2024-50705
Unauthenticated reflected cross-site scripting XSS vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter...
CVE-2024-50704
The Uniguest Tripleplay multimedia player is affected by an unauthenticated remote code execution vulnerability in versions prior to 24.2.1 . A remote attacker can execute arbitrary code by sending a specially crafted HTTP POST request . No specific remediation, exploit links, or MITRE ATT&CK IDs...
CVE-2024-50706
An unauthenticated SQL injection vulnerability exists in Uniguest Tripleplay (versions 23.1+ and prior to 24.2.1 ). This flaw allows remote attackers to execute arbitrary SQL queries on the backend database. While the root cause is identified as improper neutralization of special elements used in...
CVE-2024-50705: Cross-Site Request Forgery (CSRF)
Unauthenticated reflected cross-site scripting XSS vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter...
CVE-2024-50707: Improper Control of Generation of Code
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request...
CVE-2024-50705
Unauthenticated reflected cross-site scripting XSS vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter...
CVE-2024-50704
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request...
Uniguest Tripleplay 跨站请求伪造漏洞
Uniguest Tripleplay is a multimedia player from Uniguest. A security vulnerability exists in Uniguest Tripleplay versions prior to 24.2.1 that stems from reflective cross-site scripting...