PT-2025-43241

Name of the Vulnerable Software and Affected Versions selloio Sello ChannelConnector versions through 1.6.3 Description The Sello ChannelConnector software contains a flaw due to improper input handling during web page generation, leading to a Reflected Cross-site Scripting XSS condition. This...

CVE-2022-37730

In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP multifunctional device allows a hacker to inject any code into the protected web page.

The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...