Bluetron supOS Security Vulnerabilities

Bluetron supOS is an industrial operating system from the Chinese company Bluetron. A security vulnerability exists in Bluetron supOS version 5.0, which originates from allowing the api/image/download?fileName=... /directory traversal to read files...

PT-2024-28744

Name of the Vulnerable Software and Affected Versions supOS version 5.0 Description The issue allows directory traversal for reading files via the "api/image/download" endpoint, specifically when the fileName parameter contains ../. This enables unauthorized access to files on the system...

Exploit for Cross-site Scripting in Admiror-Design-Studio Admirorframes

CVE-2024-5737 AdmirorFrames Joomla! Extension HTML tag:...

PT-2024-24049 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 5.0.0 through 5.15.2 Description: The issue allows a remote authenticated attacker to delete the data of Shared To-Dos due to an incorrect authorization vulnerability. Recommendations: For Cybozu Garoon versions 5.0.0...

Yokogawa Rental & Lease Unifier 安全漏洞

Yokogawa Rental & Lease Unifier is a solution focused on equipment rental and lease management from Yokogawa Rental & Lease Japan. A security vulnerability exists in Yokogawa Rental & Lease Unifier version 5.0 and later, which stems from a lack of authorization for coejobhook command execution...

IBM Aspera 跨站脚本漏洞

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Aspera Faspex versions 5.0.0 through 5.0.6, which stems from the application's lack of effective filtering...

WordPress plugin iframe 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

PT-2024-21244 · Dell · Dell Insightiq

Name of the Vulnerable Software and Affected Versions: Dell InsightIQ version 5.0 Description: The issue is related to improper access control, allowing a remote low privileged attacker to potentially exploit it and gain unauthorized access to monitoring data. Recommendations: For Dell InsightIQ...

Dell InsightIQ 访问控制错误漏洞

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. An Access Control Error vulnerability exists in Dell InsightIQ version 5.0, which stems from incorrect access control in the application and can be exploited by an attacker to gain unauthorized access to monitoring data...

JFinalCMS SQL注入漏洞

JFinalCMS is a content management system. JFinalCMS version 5.0.0 suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the file /admin/divdata/delete. An attacker can exploit this vulnerability to execute illegal SQL comman...

WordPress Plugin Comments Extra Fields For Post,Pages and CPT Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-20374 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: Jfinalcms version 5.0.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information. The issue is related to the /admin/admin API endpoint, specifically the name parameter. Recommendations: For Jfinalcms versio...

PT-2024-2151 · Tp Link · Tp-Link Jetstream Smart Switch Tl-Sg2210P

Name of the Vulnerable Software and Affected Versions: TP-Link JetStream Smart Switch TL-SG2210P version 5.0 Build 20211201 Description: The issue is related to improper access control, allowing attackers to escalate privileges via modification of the tid and usrlvl values in GET requests. This c...

PT-2024-21288 · Basercms · Basercms

Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 5.0.9 Description: The issue is related to a cross-site scripting vulnerability in the content management feature of baserCMS. This vulnerability allows malicious code to be executed. Recommendations: For versions...

PT-2024-21184 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.5.0 Description: The issue concerns a Blind SQL Injection vulnerability, specifically time-based, that can be exploited via the CurrentFundraiser GET parameter in the FRBidSheets.php file. Recommendations: For ChurchCRM...

JFinalCMS Cross-Site Scripting Vulnerability (CNVD-2024-02993)

JFinalCMS is a content management system. A cross-site scripting vulnerability exists in JFinalcms version 5.0.0, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to run arbitrary code when creating a new custom...

PT-2024-10238

Name of the Vulnerable Software and Affected Versions IBM DevOps Velocity version 5.0.0 IBM UrbanCode Velocity versions 4.0.0 through 4.0.25 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive...

S-CMS Security Vulnerabilities

S-CMS is a PHP and MySQL based Content Management System CMS from S-CMS China. A security vulnerability exists in S-CMS v5.0, which originates from the discovery of an SQL injection vulnerability via the Aformauth parameter in /admin/ajax.php...

S-CMS Security Vulnerabilities

S-CMS is a PHP and MySQL based Content Management System CMS from S-CMS China. A security vulnerability exists in S-CMS v5.0, which originates from the discovery of an SQL injection vulnerability via the Atextauth parameter in /admin/ajax.php...

PT-2023-31749 · S Cms · S-Cms

Name of the Vulnerable Software and Affected Versions: S-CMS version 5.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the A bbsauth parameter at the "/admin/ajax.php" API endpoint. Recommendations: For S-CMS version 5.0, consider restricting access t...