CVE-2022-33295

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...

CVE-2024-57760

JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java...

PT-2025-3555 · Jeewms · Jeewms

Name of the Vulnerable Software and Affected Versions: JeeWMS versions prior to 2025.01.01 Description: The issue is related to an arbitrary file upload vulnerability in the parserXML method. This allows attackers to execute arbitrary code via uploading a crafted file. There is no information...

JeeWMS 注入漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. An injection vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from SQL injection in the saveOrUpdate function...

CVE-2024-49107

WmsRepair Service Elevation of Privilege Vulnerability...

GeoServer < 2.23.4 Multiples Vulnerabilities

According to its banner, the version of GeoServer running on the remote host is prior to 2.23.5 or 2.24.0 prior to 2.24.2. It is, therefore, affected by Multiples Vulnerabilities : - An Arbitrary file upload vulnerability in REST Coverage Store API - A Stored Cross-Site Scripting XSS vulnerabilit...

CVE-2024-52732

Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system being reused...

CVE-2024-52732

Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system being reused...

CVE-2024-52732: Incorrect Authorization

Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system being reused...

CVE-2024-52732

The wms-Warehouse management system-zeqp (version v2.20.9.1 ) is vulnerable to incorrect access control due to the reuse of the zeqp system token value . This flaw allows for unauthorized access to the system. As a temporary workaround, it is recommended to disable the token reuse mechanism and r...

Malware in eslint-plugin-wms

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in wms-printer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41ff2a05e27682f3bd0effb5750b0d0b26312deafd88f3eff71b6e0d1f5aec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in wms-printer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11019 Malicious code in wms-printer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41ff2a05e27682f3bd0effb5750b0d0b26312deafd88f3eff71b6e0d1f5aec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-49596

Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and arbitrary file deletion...

CVE-2024-49597

Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of Excessive Authentication Attempts vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

Exploit for Code Injection in Geoserver

CVE-2024-36401-poc CVE-2024-36401 is a high-risk remote code...

Malicious code in eslint-plugin-wms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b20357cf95acf41bc1718eeb796b29f01f318a9874d59cd4ef1a87dd4cadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10665 Malicious code in eslint-plugin-wms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b20357cf95acf41bc1718eeb796b29f01f318a9874d59cd4ef1a87dd4cadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Huawei HarmonyOS/EMUI Access Privilege Verification Vulnerability

Huawei HarmonyOS is a distributed operating system developed independently by Huawei Technologies Co. Huawei EMUI is Huawei's emotional operating system based on Android. Huawei HarmonyOS/EMUI suffers from an access privilege authentication vulnerability, which originates from an access privilege...