EUVD-2018-1955

Malware in sbrugna...

Jpress 命令注入漏洞

Jpress is a set of blogging platforms developed by the Jpress team using the Java language. an access control error vulnerability exists in Jpress, which stems from the product allowing the io.jpress.web.admin.AddonController::doUploadAndInstall function to execute commands. No detailed...

CVE-2018-1000619

Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, babgetAddonFilePathfromTg that can result in Authenticated Remote Code Execution. This attack appear to be exploitable via The attacker must have permission to upload addons...