BEESCMS 跨站请求伪造漏洞

BEESCMS is a PHP and MySQL based, scalable content management system CMS. A security vulnerability exists in version v4 of BEESCMS that stems from the presence of a cross-site request forgery CSRF vulnerability that allows an attacker to delete an administrator account via a crafted request...

MonicaHQ 安全漏洞

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version 4.0.0 that originates from a vulnerability that allows an authenticated, remote attacker to execute malicious code in the application via the settings endpoint and the CSTI in the...

PT-2023-11615 · Beescms · Beescms

Name of the Vulnerable Software and Affected Versions: beescms version 4 Description: A Cross Site Request Forgery CSRF issue allows attackers to delete the administrator account via a crafted request to "/admin/admin admin.php". This can be exploited by sending a malicious request to the specifi...

PT-2023-16703 · Monicahq · Monicahq

Name of the Vulnerable Software and Affected Versions: MonicaHQ version 4.0.0 Description: The issue allows an authenticated remote attacker to execute malicious code in the application via CSTI in the "settings" endpoint and first name parameter. Recommendations: For MonicaHQ version 4.0.0,...

PT-2023-11484 · Unknown · Bluethrust Clan Scripts

Name of the Vulnerable Software and Affected Versions: Bluethrust Clan Scripts version 4 Description: A Cross Site Request Forgery CSRF issue allows attackers to escalate privileges to an arbitrary account via a crafted request to "/members/console.php?cID=5". Recommendations: For Bluethrust Clan...

Clan Scripts 跨站请求伪造漏洞

Clan Scripts is a CMS written for gaming communities and societies. A security vulnerability exists in Bluethrust Clan Scripts v4, which stems from the presence of a cross-site request forgery CSRF vulnerability that allows an attacker to elevate privileges to an arbitrary account via a crafted...

GL.iNet MT3000 操作系统命令注入漏洞

The GL.iNet MT3000 is an AX3000 portable router using the Wi-Fi 6 protocol from China's GL.iNet. An operating system command injection vulnerability exists in the GL.iNet MT3000 version 4.1.0, which stems from the presence of operating system command injection...

CVE-2023-2392

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ManualDate.minutes leads to cross site...

Textpattern 代码问题漏洞

Textpattern CMS is a Php-based content management system from the Textpattern team. An arbitrary file upload vulnerability exists in Textpattern CMS version v4.8.8. The vulnerability stems from the application's lack of effective validation of uploaded files. An attacker can exploit the...

GajShield Data Security Firewall 安全漏洞

GajShield Data Security Firewall is an enterprise-grade firewall product from GajShield that provides network security solutions to protect organizations from a wide range of cyber threats and attacks, including malware, viruses, spyware, phishing, DDoS attacks, and more. A security vulnerability...

IBM Cloud Pak for Data 代码问题漏洞

IBM Cloud Pak for Data is a data and AI platform with data structure from International Business Machines IBM. All data can be made available for AI and analytics on any cloud. A server-side request forgery vulnerability exists in IBM Cloud Pak for Data versions 4.0 and 4.5 that stems from the...

Contiki-NG 安全漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A security vulnerability exists in Contiki-NG version 4.8 and prior versions, which stems from the Antelope database management system that triggers a difference-one error...

PT-2023-20855 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A Buffer Overflow issue was discovered, allowing an attacker to cause a Denial of Service via the TextOutputDev.cc function. Recommendations: For XPDF version 4.04, at the moment, there is no information about a...

IBM Cloud Pak for Data 代码问题漏洞

IBM Cloud Pak for Data is a data and AI platform with data structure from International Business Machines IBM. All data can be made available for AI and analytics on any cloud. An arbitrary file upload vulnerability exists in IBM Cloud Pak for Data version 4.5, 4.6. The vulnerability stems from t...

PT-2023-20856 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: An issue in XPDF allows an attacker to cause a denial of service via a crafted pdf file in the object.cc parameter. Recommendations: For XPDF version 4.04, consider avoiding the use of the object.cc parameter...

PT-2023-20814 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.5.3 Description: A cross-site request forgery CSRF issue allows attackers to edit information for existing people on the site. This means an attacker can trick a user into performing unintended actions on the site...

Dradis 跨站脚本漏洞

Dradis is a suite of reporting and collaboration tools for information security teams. A security vulnerability exists in Dradis versions prior to 4.8.0. An attacker exploited the vulnerability to execute a cross-site scripting attack...

PT-2023-20817 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.5.3 Description: A cross-site request forgery CSRF vulnerability allows attackers to change any user's password except for the user that is currently logged in. Recommendations: For ChurchCRM version 4.5.3, consider...

A flaw was found in tiffcrop a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.

...

PT-2025-40689

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.2.2 Description A general protection fault may occur due to an error in the sdma v4 software finalization process. This issue affects the amdgpu driver and can lead to system instability. The fix addresses an...