41 matches found
CVE-2026-49345 Mercator CVE Configuration Vulnerable to Server-Side Request Forgery (SSRF)
Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, a Server-Side Request Forgery SSRF vulnerability exists in Mercator's CVE configuration panel /admin/config/parameters. The testProvider method in ConfigurationController passes...
CVE-2016-20084
WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings and inject persistent cross-site scripting payloads through the admin.php page parameters. Attackers can inject malicious JavaScrip...
CVE-2019-25404
Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input through admin management parameters. Attackers can inject script payloads in the adminname, name, and surname parameters via...
PT-2026-20807
Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input through admin management parameters. Attackers can inject script payloads in the admin name, name, and surname parameters via...
CVE-2019-25401 Bematech Printer MP-4200 TH Denial of Service
Bematech formerly Logic Controls, now Elgin MP-4200 TH printer contains a denial of service vulnerability in the admin configuration page. Remote attackers can send crafted POST requests with malformed 'admin' and 'person' parameters to crash the printer's web service, causing a denial of service...
CVE-2020-37106
Business Live Chat Software 1.0 contains a cross-site request forgery vulnerability that allows attackers to change user account roles without authentication. Attackers can craft a malicious HTML form to modify user privileges by submitting a POST request to the user creation endpoint with...
CVE-2023-53880
Lucee 5.4.2.17 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through administrative interface parameters. Attackers can craft specific payloads targeting admin pages like server.cfm and web.cfm to execute arbitrary JavaScri...
EUVD-2017-8980
Malware in sbrugna...
EUVD-2006-0093
Malware in sbrugna...
EUVD-2016-10263
Malware in sbrugna...
EUVD-2014-9385
Malware in sbrugna...
EUVD-2010-1395
Malware in sbrugna...
EUVD-2004-2015
Malware in sbrugna...
EUVD-2013-3450
Malware in sbrugna...
EUVD-2014-9174
Malware in sbrugna...
EUVD-2017-8809
Malware in sbrugna...
EUVD-2019-5560
Malware in sbrugna...
EUVD-2014-8771
Malware in sbrugna...
EUVD-2015-5079
Malware in sbrugna...
EUVD-2018-9758
Malware in sbrugna...