409 matches found
CVE-2026-29933
A reflected cross-site scripting XSS vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referrer value in the request header...
CVE-2022-23888
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey CSRF via the component /yzmcms/comment/index/init.html...
CVE-2022-23383
YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non...
CVE-2022-23384
YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...
CVE-2022-23887
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete...
CVE-2019-16532
An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections...
EUVD-2018-12593
Malware in sbrugna...
EUVD-2020-11025
Malware in sbrugna...
EUVD-2020-15156
Malware in sbrugna...
EUVD-2019-7239
Malware in sbrugna...
EUVD-2020-23554
Malware in sbrugna...
EUVD-2018-19210
Malware in sbrugna...
EUVD-2018-19757
Malware in sbrugna...
EUVD-2020-13128
Malware in sbrugna...
EUVD-2018-20366
Malware in sbrugna...
EUVD-2020-23553
Malware in sbrugna...
EUVD-2018-2300
Malware in sbrugna...
EUVD-2020-11845
Malware in sbrugna...