CVE-2021-27672

SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...

Exploit for Path Traversal in Welcart Welcart_E-Commerce

Zenario CMS 9.3 - Unauthenticated RCE Exploit CVE-2022-418...

CVE-2021-27673

Cross Site Scripting XSS in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "cID" parameter when creating a new HTML component...

CVE-2022-23043

Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension. Then an attacker can upload a malicious file, intercept the request and change the extension to '.phar' in order to run commands on the server...

EUVD-2021-1293

Malware in sbrugna...

EUVD-2021-1331

Malware in sbrugna...

EUVD-2022-0870

Malicious code in bioql PyPI...

EUVD-2022-7349

Malicious code in bioql PyPI...

EUVD-2023-43287

Malicious code in bioql PyPI...

EUVD-2022-7420

Malicious code in bioql PyPI...

EUVD-2023-2698

Malicious code in bioql PyPI...

EUVD-2022-7227

Malicious code in bioql PyPI...

EUVD-2023-2781

Malicious code in bioql PyPI...

EUVD-2022-7324

Malicious code in bioql PyPI...

EUVD-2022-7250

Malicious code in bioql PyPI...

EUVD-2022-1561

Malicious code in bioql PyPI...

EUVD-2022-7369

Malicious code in bioql PyPI...

EUVD-2023-2671

Malicious code in bioql PyPI...

EUVD-2022-7323

Malicious code in bioql PyPI...

CVE-2023-44770

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias...